CROWDSTRIKE TO ACQUIRE TWO AI SECURITY STARTUPS FOR $495M
$CRWD has agreed to acquire Fiddler AI and Dreadnode as it expands its Falcon platform to secure AI agents throughout their lifecycle.
The acquisitions, include:
1) Fiddler AI (~$400M) | Agent Observability: Monitors AI agents, tracks their decisions and tool usage, and explains why they took certain actions. It can also identify hallucinations, behavioral drift and unintended actions.
2) Dreadnode (~$95M) | AI Security Testing: Tests AI models, applications and agents for vulnerabilities before deployment, using more than 100 attack strategies, including jailbreaks, prompt injection and agent-specific attacks.
The deals come as companies increasingly deploy autonomous AI agents with access to corporate systems, often faster than security teams can establish proper controls.
One major challenge is that an AI agent can have valid credentials and authorized access but still make incorrect decisions, ignore instructions or take unintended actions without being hacked.
Separately, CrowdStrike also introduced an AI Kill Switch within Falcon Guardian, allowing security teams to terminate misbehaving agents, prevent them from restarting and revoke their network access.
The feature is available through the AI Gateway today, with endpoint-level termination planned.
CrowdStrike plans to integrate Fiddler as Falcon Observe, while Dreadnode will add automated AI security testing to Falcon. Both capabilities are expected to become generally available in Q4 FY27.
The broader strategy is to bring AI security testing, agent monitoring and real-time intervention into a single platform, covering what agents are allowed to do, what they actually do and how to stop them when something goes wrong.
Both acquisitions are expected to close in Q4 FY27, with payments primarily in cash and some stock.
Wall St Engine (@wallstengine) posts that CrowdStrike has agreed to acquire two AI security startups: Fiddler AI, for agent observability, and Dreadnode, for AI security testing. The prices are the post’s: about $400 million for Fiddler and about $95 million for Dreadnode, $495 million in all. The post also says CrowdStrike introduced an AI Kill Switch in Falcon Guardian that lets security teams terminate misbehaving agents and revoke their network access.
CrowdStrike has agreed to acquire two artificial-intelligence security startups, Fiddler AI and Dreadnode, for a combined $495 million, The Wall Street Journal reported in an exclusive on 3 November. The Journal said CrowdStrike will pay roughly $400 million for Fiddler AI, which develops software to monitor and explain agent behavior, and about $95 million for Dreadnode, which probes AI models for flaws before deployment.
Fiddler said in January that its Series C brought its total funding to $100 million. A price of roughly $400 million is about four times that sum, by our arithmetic. Dreadnode’s reported price is 6.8 times the $14 million Series A it announced in February 2025.
CrowdStrike said it would pay most of the purchase price for both in cash, with a portion in stock subject to vesting conditions, according to the Journal. The paper framed the deals as expanding CrowdStrike’s push to monitor and contain AI agents as enterprises rush to deploy the technology.
The key insight: By our arithmetic, CrowdStrike’s reported price of roughly $400 million for Fiddler AI is about four times the $100 million Fiddler said it had raised in total. The two deals together, $495 million, equal 9.9% of the cash CrowdStrike held at the end of July.
Update, 3 Nov: CrowdStrike confirms Dreadnode too. In a second release on Business Wire at 09:00 UTC, CrowdStrike said it “has signed a definitive agreement to acquire Dreadnode, a leader in Automated AI Security Testing.” Again it gave no purchase price, so the about $95 million for Dreadnode remains the Journal’s figure. The price “is contemplated to be paid predominantly in cash and includes a portion to be delivered in the form of stock subject to vesting conditions”, and the deal “is expected to close during CrowdStrike’s fourth quarter of FY27, subject to customary closing conditions.” Dreadnode becomes Automated AI Security Testing on the Falcon platform, “generally available in Q4 FY27”, and its team joins CrowdStrike’s Cyber Superintelligence Lab. EDGAR still showed no CrowdStrike 8-K when we checked at 09:20 UTC.
Update, 3 Nov: CrowdStrike confirms the Fiddler deal, without a price. In a release on Business Wire on 3 November, CrowdStrike said it “has signed a definitive agreement to acquire Fiddler AI, a leader in AI agent observability and explainability.” It gave no purchase price. It said the price “is contemplated to be paid predominantly in cash and includes a portion to be delivered in the form of stock subject to vesting conditions”, and that the deal “is expected to close during CrowdStrike’s fourth quarter of FY27, subject to customary closing conditions.” Fiddler will be sold inside the Falcon platform as Falcon Observe, “generally available in Q4 FY27”. Chief executive George Kurtz called Fiddler “the flight recorder for every agent”.
None of CrowdStrike’s three earlier releases of 3 November that we read mentions Dreadnode; CrowdStrike announced the Dreadnode agreement in a separate release later that morning, at 09:00 UTC (see the update above). The roughly $400 million for Fiddler, the about $95 million for Dreadnode and the $495 million total remain the Journal’s reporting. The same day CrowdStrike launched the AI Kill Switch in Falcon Guardian, which it says lets a defender terminate a misbehaving agent, block it from launching again and cut off its enterprisenetwork access, and which it says is “available today”. EDGAR showed no CrowdStrike 8-K when we checked at 08:55 UTC on 3 November; the latest was filed on 26 August 2026.
What CrowdStrike Is Buying
Fiddler AI is based in Palo Alto, California, and was founded in 2018, the Journal said. In its Series C announcement of 27 January 2026, Fiddler described itself as “the enterprise AI observability and security platform” and said the funding accelerates its vision “to become the neutral control plane for compound AI systems as enterprises increasingly incorporate autonomous agents into business-critical workflows”.
Dreadnode was founded in 2023. The Journal called it an automated security-testing platform. Its own Series A release says it was founded by Will Pearce, “who built the AI red teams at Microsoft and NVIDIA”, and Nick Landers. In March 2026 it launched Dreadnode 2.0, which it described as “the first platform that supports the full security agent lifecycle”.
Put simply, one company watches AI agents after they are deployed, and the other tests AI models for flaws before they are deployed. Fiddler accounts for 81% of the combined $495 million, by our arithmetic.
Funding each startup disclosed against the price reported by The Wall Street Journal on 3 November 2026, in $ millions. Fiddler AI’s roughly $400 million is about 4x the $100 million total funding it announced in January 2026; Dreadnode’s about $95 million is 6.8x its $14 million Series A of February 2025, by our arithmetic. Prices are approximate as reported.
What the Two Startups Had Raised
Fiddler’s $30 million Series C was led by RPS Ventures, with existing investors including Lightspeed Venture Partners, Lux Capital and Insight Partners. “The investment brings Fiddler’s total funding to $100M”, the company said. It also said: “The company has grown its revenue more than 4x in the last 18 months”. Fiddler has not published a revenue figure in that release.
Dreadnode’s $14 million Series A was led by Decibel, with Next Frontier Capital, In-Q-Tel (IQT), Sands Capital and Indie VC participating. The release also names early supporters including Jon Oringer and Aviso Ventures but gives no amounts for them, so the 6.8 times multiple compares the price with the Series A only.
Against CrowdStrike’s Own Numbers
CrowdStrike held $5.01 billion of cash and cash equivalents at 31 July 2026, according to its latest 10-Q. The $495 million is 9.9% of that balance, and 44% of the $1.12 billion of operating cash flow it generated in the six months to July, by our arithmetic.
The same filing shows ARR of $5.8 billion at 31 July 2026, with $332.8 million of net new ARR added in the quarter.
A Run of Security Deals
The 10-Q lists four completed acquisitions since September 2025. CrowdStrike paid $252.7 million in cash for Onum, “a leader in real-time telemetry pipeline management”, and $212.1 million for Pangea, “a company that offers AI detection and response solutions”. In February 2026 it paid $327.5 million for the remaining 90.6% of Seraphic and $627.9 million for SGNL, “a leader in continuous identity security”.
Those four cash amounts, each net of cash acquired, add up to about $1.42 billion, by our arithmetic. At roughly $400 million, Fiddler would rank second by price among them, behind SGNL. The 10-Q also says CrowdStrike signed an agreement in July 2026 to acquire the technology assets of XM Cyber for $145.0 million in cash and shares, plus additional shares.
Business Pill · Least Privilege
An evergreen Business Engineer explainer on least-privilege access: giving each user or system only the access its role needs. It teaches the general idea only and does not discuss CrowdStrike, Fiddler AI or Dreadnode.
As we read the reports, the two targets sit at opposite ends of an AI system’s life. Dreadnode tests AI models for flaws before deployment, according to the Journal; Fiddler monitors and explains agent behavior once agents are running.
As we read the 10-Q, the deal extends a pattern rather than starting one. CrowdStrike has already paid cash for Pangea, which it describes as offering AI detection and response, and for identity, telemetry and browser security companies since September 2025.
Krishna Gade, co-founder and CEO of Fiddler, January 2026
“Every major platform shift requires new infrastructure. When companies moved to the cloud, they needed orchestration layers. As they deploy autonomous agents, they need a control plane”
Three Implications
FOR CROWDSTRIKE The Journal says most of the $495 million is to be paid in cash. CrowdStrike held $5.01 billion of cash and cash equivalents at 31 July 2026, its 10-Q shows.
FOR AI SECURITY STARTUPS Fiddler had raised $100 million and Dreadnode announced a $14 million Series A; the reported prices are about 4x and 6.8x those sums, by our arithmetic.
FOR ENTERPRISE BUYERS The Journal ties the deals to companies deploying AI agents faster than some security teams can establish controls.
The framework describes the new software stack this way: “Trust Layer — cross-cutting band that cuts through all four horizontal layers. Agent identity-as-buyer, audit trails, attestation, capability scoping.”
As we read it, CrowdStrike is buying into that band twice: Dreadnode tests models before they ship, and Fiddler watches agents after they run. The framework does not discuss CrowdStrike, Fiddler or Dreadnode.
What Is Not Established
CrowdStrike has confirmed both agreements but neither price: its Fiddler release (08:37 UTC) and its Dreadnode release, which followed later the same morning (09:00 UTC), give no purchase price, so the $495 million, the roughly $400 million and the about $95 million rest on the Journal’s report. No 8-K had been filed when we checked EDGAR at 09:20 UTC on 3 November. The Journal article is paywalled; we read its headline, summary and first three paragraphs only. CrowdStrike expects both deals to close in its fourth quarter of fiscal 2027; we do not know the exact split between cash and stock, or the valuation of either startup’s last private round. The 4x and 6.8x multiples compare a price with money raised, not with a valuation.
This Week In The AI Supercycle
Anthropic’s Reality Check, The Capital Squeeze, & The New World Order
This week’s issue: for two years the AI build-out was priced as a growthstory. This week it started being priced as a credit story.
CrowdStrike has agreed to buy Fiddler AI for roughly $400 million and Dreadnode for about $95 million, the Journal reported, $495 million in all and mostly in cash. Fiddler’s price is about four times the $100 million it said it had raised, and the pair costs 9.9% of CrowdStrike’s cash at the end of July, by our arithmetic.
95,000+ executives read Business Engineer for the AI strategy frameworks cited by ChatGPT, Claude, and Perplexity.
A note on sourcing. The deal terms are from The Wall Street Journal’s report of 3 November 2026, of which we read the headline, summary and first three paragraphs. The definitive agreements for Fiddler and Dreadnode, their payment form and expected close are from CrowdStrike’s releases of 3 November 2026 on Business Wire; the Dreadnode release came at 09:00 UTC, after the Fiddler release. Funding figures are from Fiddler AI’s and Dreadnode’s own announcements, and CrowdStrike figures are from its 10-Q for the quarter ended 31 July 2026. Multiples and percentages are our arithmetic. We did not contact CrowdStrike, Fiddler or Dreadnode.
Gennaro Cuofano is a CRO and tech executive who has worked in AI since late 2015, starting with bringing NLP, natural-language generation, voice and chatbot products to the marketing industry. His background is in law and finance: he holds a Master's degree in Law and an International MBA with an emphasis on corporate finance (LUISS Business School and the University of San Diego, 2012), and worked as a financial analyst at a real-estate investment firm in San Diego and as an assistant controller. His work focuses on business model strategy, business engineering and, more broadly, structural analysis: how companies make money, read from their own filings. He created FourWeekMBA and leads research there and at The Business Engineer, his newsletter on AI and business strategy, with over 95,000 subscribers and more than 1,000 published analyses. His writing has also appeared on Entrepreneur (for example, How to Digitize a Family Business in Europe) and HackerNoon. Find him on LinkedIn and Substack. See how we source.
