Pomegra
CrowdStrike will pay about $495 million for two AI security startups, Fiddler AI and Dreadnode, to cover how AI agents are tested, monitored and stopped inside enterprises.
Key Takeaways
- CrowdStrike agreed on Nov. 3, 2026 to buy Fiddler AI for about $400M and Dreadnode for about $95M.
- Fiddler had raised about $100M and Dreadnode $14M, so the Fiddler price is roughly 4x its funding and Dreadnode's roughly 7x.
- Both deals are expected to close in CrowdStrike's fiscal Q4 2027, mostly in cash with some stock that vests over time.
Lead
CrowdStrike signed definitive agreements on Nov. 3, 2026 to acquire Fiddler AI, an AI agent observability company, and Dreadnode, an AI security testing startup. The Wall Street Journal reported the prices at about $400 million and $95 million, which puts the combined bill near $495 million. CrowdStrike announced the deals at its Fal.Con Europe conference in Barcelona, alongside a runtime "kill switch" for AI agents that have gone off course. The company has not confirmed the prices.
What Is CrowdStrike Buying?
CrowdStrike is buying two pieces of the same pipeline: one that watches agents after they ship, and one that attacks them before they do. Fiddler, founded in 2018 and led by co-founder and CEO Krishna Gade, will become Falcon Observe inside the Falcon platform. It evaluates agents before deployment, traces their decisions, reasoning paths and tool calls, and flags behavioral drift and hallucinations. It also produces audit-ready records, and it works with frameworks including LangGraph, Amazon Bedrock and Google ADK.
Dreadnode, founded in 2023 by former NVIDIA AI red team lead Will Pearce and former NetSPI research executive Nick Landers, automates adversarial testing. Its platform runs more than 100 attack methods, including jailbreaks and prompt injection. It maps findings to the OWASP Top 10 for LLMs and the NIST AI Risk Management Framework. CrowdStrike plans to fold it into Falcon Guardian, its product for monitoring and controlling agents.
How Are the Deals Structured?
Most of the consideration is cash, with a stock component that vests over time if conditions are met. Both transactions are expected to close in CrowdStrike's fourth fiscal quarter of 2027, and Falcon Observe is slated for general availability in the same period. Terms beyond that are undisclosed.
The vesting stock is the detail to watch. It ties part of the payout to employee retention, which fits a deal where the buyer wants the engineering teams as much as the code. These are strategic product purchases, not acquihires. Fiddler carries an eight-year-old product with enterprise customers and a $30 million Series C from January 2026.
What Did Investors Get Out of It?
Fiddler's backers get a price about four times total funding, which is a respectable result but not a blowout. The company raised its $30 million Series C in January 2026, led by RPS Ventures. Existing investors Lightspeed Venture Partners, Lux Capital, Insight Partners, Capgemini Ventures, Dallas VC, Dentsu Ventures and Mozilla Ventures joined, as did new strategic backers LG Technology Ventures, Benhamou Global Ventures and LDV Partners. That brought total funding to about $100 million. The valuation at that round was not disclosed, so the sale price cannot be compared directly with it. Still, an exit roughly ten months after a growth round suggests the Series C investors were pricing in a strategic outcome.
Dreadnode's result looks stronger on paper. It raised a $14 million Series A in February 2025, led by Decibel, with Next Frontier Capital, In-Q-Tel, Sands Capital and Indie VC participating. A $95 million exit for a company founded in 2023 returns roughly seven times the capital raised in under two years.
Why Did CrowdStrike Pay Up Now?
CrowdStrike paid because enterprises are deploying agents faster than security teams can audit them, and the vendor that owns the record of what an agent did has leverage in every compliance conversation. CEO George Kurtz framed it as a regulatory question: when a regulator or board asks what an agent did, "the model did it" is not an answer. He described Fiddler as the flight recorder for every agent.
The kill switch announced alongside the deals completes the argument. CrowdStrike now has a story spanning pre-deployment testing, runtime monitoring and forced shutdown. Kurtz described the shift as moving "from security to safety," and said the control "lives outside the model, at runtime, where an agent can't argue with it."
What Are the Risks?
Integration is the open question. Fiddler built its pitch on neutrality across models and clouds, and customers who chose it for that reason may question whether the product stays neutral inside a security vendor's platform. Dreadnode's red-teaming work has also drawn a research and government-adjacent customer base, with In-Q-Tel among its backers, that may not buy through a CrowdStrike sales motion.
There is also a pricing question. The combined $495 million is small next to CrowdStrike's overall size, so the financial risk is limited. The larger risk is bundling: if Falcon Observe is sold as an add-on module, adoption depends on whether buyers see agent observability as security spend or as an engineering tool.
What Comes Next for AI Agent Security?
Expect more buyers to follow CrowdStrike into agent observability and testing. Security platform vendors have spent two years adding AI features, and standalone startups in agent monitoring, red teaming and runtime control are now natural targets. The $400 million Fiddler price sets a reference point for the group.
The nearer test is execution. CrowdStrike must close both deals, ship Falcon Observe in the same fiscal quarter, and show that customers will pay for it. If it does, rivals will need their own answer on how agents are observed and tested.
Outlook
CrowdStrike is spending about $495 million to add observability and adversarial testing to its Falcon platform, with closing expected in fiscal Q4 2027. The prices are reported, not confirmed, and the stock-vesting terms are undisclosed. Fiddler's investors get a modest multiple on roughly $100 million raised, while Dreadnode's backers get a faster one. The market will judge the deals on whether CrowdStrike can keep Fiddler's neutrality credible and turn the combined stack into a product enterprises buy.
