Pomegra
CrowdStrike is in advanced talks to buy Israeli AI data-security startup Orion for about $500M, per Calcalist, extending its Tel Aviv acquisition streak.
Key Takeaways
- CrowdStrike is in advanced talks to buy Orion Security for about $500M, according to Israeli business outlet Calcalist.
- Orion raised $38M since 2024, including a $32M Series A in February 2026 led by Norwest.
- No agreement is signed, and neither company had confirmed the talks at the time of the report.
Lead
CrowdStrike is negotiating to acquire Orion Security, a Tel Aviv-based startup founded in 2024, for roughly $500M, Calcalist's CTech reported on October 12, 2026. The talks are described as advanced, but nothing has been signed. Neither company had commented when the report appeared.
At that price, the buyer would pay about 13 times the $38M Orion has raised in total. The startup employs roughly 20 people across Israel and New York, which works out to about $25M per head.
What Is Orion and What Does It Build?
Orion builds data loss prevention (DLP) software that replaces hand-written security policies with AI agents. Traditional DLP tools flag or block data transfers based on rules that administrators configure and revise constantly. Orion's platform instead maps how data normally moves through a company and judges each transfer by content sensitivity, lineage, user identity and intent.
Its coverage reportedly spans endpoints, cloud, web, SaaS applications, email and MCP traffic, the protocol AI agents use to reach company systems. CEO Nitay Milner, previously a product leader at Epsagon, which Cisco acquired, has argued that better policies are not the answer to DLP, because legacy systems demand hours of tuning. CTO Jonathan Kreiner formerly led application security at WalkMe.
How Much Has Orion Raised and From Whom?
Orion has raised $38M across two rounds. A $6M seed in March 2025 was led by PICO Venture Partners and FXP, with Underscore VC participating. The $32M Series A closed in February 2026 and was led by Norwest Venture Partners, with IBM, PICO and Lama Partners also in the round. The Series A valuation was never disclosed.
A $500M exit would arrive about eight months after that round. For Norwest and the seed backers, that is a fast return on a company less than three years old. It also suggests the Series A was priced well below the sale figure, though the actual terms remain undisclosed.
Why Would CrowdStrike Pay $500M for a 20-Person Startup?
CrowdStrike would be buying a product and a team, not revenue. The company has not disclosed Orion's sales, and a 20-person firm that raised its first institutional money in 2025 is unlikely to carry large recurring revenue. This looks like a strategic purchase of technology rather than an acquihire, since the price reflects a product CrowdStrike wants to sell inside its Falcon platform.
The logic fits the company's existing data-security work. CrowdStrike bought Flow Security in 2024 for a reported $200M to $220M, giving it a way to locate sensitive data across cloud environments. Orion would add the enforcement step: deciding in real time whether a specific transfer is a leak. Pairing discovery with prevention would let CrowdStrike pitch data protection as a single module rather than a separate vendor contract.
Strategic Context: A Pattern of Israeli Purchases
An Orion deal would be the latest in a series of Israeli acquisitions. CrowdStrike paid about $350M for Bionic in September 2023, roughly $300M for Adaptive Shield in November 2024, and about $400M for Seraphic in January 2026, according to reported figures. The prices have stayed in a narrow band of $200M to $400M, which makes $500M the highest in the run.
That premium may reflect competition for AI-native security assets. Buyers are paying up for teams that have built products around AI agents and AI traffic, an area where incumbents have little in-house technology.
What Could Still Go Wrong?
The deal can fall apart at several points. Advanced talks do not guarantee a signed agreement, and the reported price could move during due diligence. Integration is a separate question, since CrowdStrike must fold a young product into a large platform without losing the founders who built it.
Regulatory review is unlikely to be a major obstacle for a transaction this size, given Orion's small market footprint. The more practical risk is customer reaction. Enterprises that bought Orion as an independent DLP tool may reconsider if it becomes a bundled add-on.
Outlook
If the deal closes near $500M, it would be CrowdStrike's largest reported Israeli purchase and a rapid exit for Orion's investors. The next signals are a formal announcement from either company and any disclosure of Orion's revenue and customer count. Until then, the price and structure rest on a single press report.
