CrowdStrike Fiddler AI Acquisition Adds Dreadnode for Falcon AI Agent Security

CrowdStrike announced definitive agreements on November 3, 2026, during its Fal.Con Europe conference in Barcelona to acquire Fiddler AI and Dreadnode. The deals target expanded capabilities in the Falcon platform for securing and observing AI agents.

CrowdStrike Fiddler AI Deal Terms and Product Roadmap

The company will pay approximately 400 million dollars for Fiddler AI and 95 million dollars for Dreadnode, with the combined total near 495 million dollars. Payments consist mostly of cash along with some vesting stock. Fiddler AI, founded in 2018 in Palo Alto, has raised roughly 99 to 100 million dollars. Dreadnode, founded in 2023, has raised 14 million dollars.

Fiddler AI supplies pre-deployment evaluation for agents, including accuracy checks, task completion rates, and policy compliance. It also provides tracing of reasoning steps and tool calls, detection of behavioral drift or hallucinations, audit logging, and token usage tracking. The technology integrates through OpenTelemetry and supports frameworks such as LangGraph, Amazon Bedrock, and Google ADK. After closing, the product will operate as Falcon Observe and reach general availability in the fourth quarter of fiscal 2027, which ends January 31, 2027.

Dreadnode automates security testing by executing more than 100 attack strategies against models, agents, reasoning loops, applications, and MCP servers. Strategies cover jailbreaks, prompt injection, and multi-turn agent-specific attacks. Findings map to the OWASP Top 10 for LLMs, OWASP Agentic Security, MITRE ATLAS, and NIST AI RMF. The system ranks severity and produces reports. The Dreadnode team will join CrowdStrike’s Cyber Superintelligence Lab, and the technology will integrate into Falcon Guardian and AIDR. General availability is also set for the fourth quarter of fiscal 2027.

Falcon Platform Expansions and Market Context

CrowdStrike already offers Falcon Guardian for AI detection and response plus identity controls. The new acquisitions build on the 2025 purchase of Pangea and add complementary functions for agent observability and automated security testing. At the same event, the company introduced an AI kill switch inside Falcon Guardian that terminates rogue agents at the gateway, cuts network access, and blocks restarts; endpoint enforcement for the feature is planned.

CEO George Kurtz described Fiddler as the flight recorder for every agent, supplying the observability needed to explain exactly what an agent did and why. Fiddler CEO Krishna Gade noted the convergence of AI security and observability. Dreadnode founders stated that joining the lab will allow them to scale defensive capabilities against emerging threats.

The acquisitions address the widening gap between rapid AI agent adoption and lagging governance and security controls. Comparable moves by other vendors, including Palo Alto Networks, indicate growing competition in this segment. Closings remain subject to customary conditions and are expected in the fourth quarter of fiscal 2027. No specific post-close integration timelines or revenue impact figures have been released.

Next Steps for Customers and Platform Users

Existing CrowdStrike customers can expect the combined capabilities to appear under Falcon Observe and the automated testing module within Falcon Guardian. The additions extend the platform’s coverage from traditional endpoints and cloud workloads into the lifecycle of AI agents. Organizations already using OpenTelemetry pipelines or frameworks supported by Fiddler will see the most direct migration path once the products reach general availability.

Security teams evaluating AI agent deployments can review the new kill switch feature now available in Falcon Guardian while they prepare for the upcoming observability and testing modules. The acquisitions position CrowdStrike to compete directly in the emerging market for tools that monitor, explain, and harden autonomous AI systems.