The Wall Street Journal reported that CrowdStrike will pay approximately $400 million for Fiddler and $95 million for Dreadnode. CrowdStrike did not independently disclose the purchase prices, but confirmed that both transactions will be funded predominantly with cash, alongside shares subject to vesting conditions.
Shares of CrowdStrike rose more than 2% in early Tuesday trading following the announcements, as investors assessed the company’s expansion into AI security and governance.
What Will Fiddler and Dreadnode Add to Falcon?
The two acquisitions address different vulnerabilities in enterprise AI deployment.
Fiddler AI develops observability and explainability technology that helps organizations understand how autonomous agents make decisions, interact with external tools and execute tasks. CrowdStrike plans to integrate these capabilities into Falcon Observe, a new product scheduled for general availability in the fourth quarter of its fiscal 2027.
The platform will evaluate agent accuracy and policy compliance before deployment, trace decisions and tool calls during operation, and identify behavioral drift, hallucinations and unintended actions. It will also generate auditable records for governance and regulatory reviews.
Dreadnode, meanwhile, specializes in identifying security weaknesses before AI applications enter production. Its automated testing platform uses more than 100 attack strategies, including prompt injection, jailbreak attempts and agent-specific attacks, to identify vulnerabilities in models, applications and their supporting infrastructure.
CrowdStrike intends to connect Dreadnode’s testing results with Falcon Guardian, allowing identified weaknesses to inform runtime security policies. The technology will also contribute to the company’s SafeMind AI security models.
Both acquisitions are expected to close during CrowdStrike’s fourth fiscal quarter of 2027, which ends January 31, 2027, subject to customary closing conditions.
Investor Takeaway
The acquisitions extend Falcon beyond conventional threat detection into AI testing and behavioral monitoring, potentially creating additional enterprise security spending opportunities.
How Does CrowdStrike’s AI Kill Switch Work?
Alongside the acquisition agreements, CrowdStrike introduced an AI Kill Switch within Falcon Guardian, giving authorized security administrators the ability to intervene when autonomous agents deviate from their intended behavior.
The control allows defenders to terminate an agent, block its relaunch on specified systems and remove its enterprise network access. Each intervention is recorded for auditing and investigation.
The initial functionality operates through gateway controls, with additional endpoint-level termination capabilities planned. CrowdStrike said the Kill Switch is available now, distinguishing it from the acquired technologies that have yet to be fully integrated.
The product addresses a security problem that conventional endpoint protection does not necessarily resolve: AI agents can perform harmful actions while using legitimate credentials and authorized software tools.
For example, an agent with permission to access financial records or enterprise applications could execute unintended transactions or disclose sensitive information without an external attacker compromising the underlying system.
That concern has already emerged in financial services. Major US banks have restricted unauthorized AI agents from accessing customer accounts after reports of automated systems operating beyond expected permissions.
CrowdStrike’s new controls are designed to give organizations a mechanism for intervening when such behavior occurs, although their effectiveness will depend on deployment coverage, policy configuration and the ability to identify problematic agent activity.
Why Is AI Security Becoming a Larger Market?
Enterprise AI adoption is creating new categories of cybersecurity exposure as autonomous systems receive access to internal applications, corporate data, payment infrastructure and cloud environments.
Unlike traditional software, AI agents can adapt their behavior in response to new information. That makes some failures difficult to anticipate through conventional vulnerability scanning or static application testing.
Security researchers have already documented AI agents attempting more than 1,200 cyber intrusions and compromising over 100 websites in a campaign that demonstrated the economics of automated attacks.
Separately, researchers associated with Google and Meta have warned that AI-agent security requires system-wide defenses, rather than protection focused exclusively on individual models.
CrowdStrike is positioning Falcon to address several stages of that risk: testing AI systems before deployment, monitoring their behavior during operation and intervening when their actions become unsafe.
The approach could increase demand for security capabilities that overlap with traditional observability, identity management and AI governance software, bringing CrowdStrike into closer competition with providers operating in those markets.
Investor Takeaway
AI-agent security offers a potential new revenue category, but the financial return will depend on customer adoption, integration costs and competition from established software vendors.
What Should CrowdStrike Investors Watch Next?
The acquisitions follow a series of broader AI partnerships announced by CrowdStrike, including expanded collaborations with Amazon Web Services, CoreWeave, Deloitte and Dynatrace.
These relationships could support distribution of Falcon’s security capabilities across enterprise cloud and AI environments, but they do not establish how much additional revenue the acquisitions will generate.
CrowdStrike has not provided financial forecasts for the Fiddler and Dreadnode businesses, disclosed their existing revenue or quantified the expected contribution to annual recurring revenue.
The immediate milestones are completion of the transactions and the planned release of Falcon Observe and automated AI security testing during the fourth quarter of fiscal 2027.
Investors will then have a clearer basis for evaluating whether CrowdStrike can convert growing concern over autonomous AI security into measurable subscription growth and higher adoption of its Falcon platform.
