# CrowdStrike Acquires Fiddler and Dreadnode for $495 Million

> CrowdStrike announced agreements to acquire AI observability firm Fiddler and AI security testing company Dreadnode for $495 million.

- Published: 2026-11-03T21:24:05.000Z
- Severity: info
- Category: Threat Intel
- Tags: CrowdStrike, Fiddler AI, Dreadnode, Artificial Intelligence, Supply Chain Attack
- Author: Runtime Rebel Intel
- Primary source: https://www.securityweek.com/crowdstrike-reportedly-paying-495-million-for-ai-security-firms-fiddler-dreadnode/
- Canonical: https://runtimerebel.com/blog/crowdstrike-acquires-fiddler-and-dreadnode-for-495-million

## Key points

- CrowdStrike is expanding its artificial intelligence security portfolio through corporate acquisitions.
- The transactions involve AI observability startup Fiddler AI and offensive security testing firm Dreadnode.
- Security leaders should monitor how these acquired capabilities integrate into existing Falcon platform deployments.

## Overview of Acquisitions

[CrowdStrike](https://www.securityweek.com/crowdstrike-reportedly-paying-495-million-for-ai-security-firms-fiddler-dreadnode/) announced agreements to acquire [AI](/glossary#ai) agent observability firm Fiddler AI and [AI security](/glossary#ai-security) testing company Dreadnode in deals reportedly valued at a combined $495 million. According to industry reporting, the cybersecurity giant is paying approximately $400 million for Fiddler and about $95 million for Dreadnode. Both transactions will be paid primarily in cash, alongside a portion in stock subject to vesting conditions. The deals are scheduled to close in the fourth quarter of CrowdStrike's fiscal year 2027.

## Integrating AI Observability and Testing

Founded in Palo Alto, California, Fiddler specializes in monitoring AI agents and explaining decision-making processes. CrowdStrike plans to commercialize this technology under the name Falcon Observe. The integration aims to deliver several key operational capabilities:

* Pre-deployment evaluation of AI agents.
* Tracing of agent reasoning loops and tool calls.
* Detection of behavioral drift and hallucinations in production environments.
* Compliance audit logging for agent activity.
* Token usage and spending tracking.

Meanwhile, Dreadnode brings offensive security testing capabilities designed specifically for artificial intelligence systems. The startup's platform allows users to execute automated tests using natural language prompts, running more than 100 known attack strategies. These include jailbreaks, [prompt injection](/glossary#prompt-injection), and multi-turn agent attacks targeting models, reasoning loops, and Model Context Protocol ([MCP](/glossary#mcp)) servers.

### Mapping Threats to Frameworks

Findings generated by Dreadnode are ranked by severity and mapped to established industry security standards, including the OWASP Top 10 for LLMs, MITRE ATLAS, and the [NIST](/glossary#nist) AI Risk Management Framework (RMF). The resulting telemetry feeds directly into CrowdStrike's Falcon Guardian AI detection and response product to generate actionable policy recommendations.

Alongside these acquisitions, CrowdStrike introduced an AI [Kill Switch](/glossary#kill-switch) within Falcon Guardian. This feature empowers authorized administrators to immediately halt misbehaving AI agents, prevent automatic restarts, and sever network access during an active security incident.

## Strategic Implications for Defenders

As enterprises rapidly deploy generative models and autonomous agents, securing the operational lifecycle becomes a critical requirement. Security teams should evaluate their current visibility into agentic workflows, particularly concerning reasoning loops and external tool integrations. Organizations utilizing the Falcon platform should review upcoming release schedules to determine when Fiddler and Dreadnode capabilities will become available within their environment.

**Related:** [AI Agents Display Unsanctioned Cyber Capabilities in Tests](/blog/ai-agents-display-unsanctioned-cyber-capabilities-in-tests), [Microsoft Warns Threat Actors Lead the Early AI Security Race](/blog/microsoft-warns-threat-actors-lead-the-early-ai-security-race)

---

AI-generated analysis from the primary source above; not human-reviewed before publication — verify anything operational against the original (https://runtimerebel.com/editorial). Quote with attribution and a link to the canonical URL: https://runtimerebel.com/blog/crowdstrike-acquires-fiddler-and-dreadnode-for-495-million