CrowdStrike has signed definitive agreements to buy two AI security startups, Fiddler AI and Dreadnode, in deals The Wall Street Journal values at a combined $495 million. Announced at the company’s Fal.Con Europe event in Barcelona on November 3, the acquisitions add agent observability and automated AI security testing to the Falcon platform. Why it matters: as enterprises deploy AI agents at scale, CrowdStrike is betting the next security market is watching, testing, and explaining the agents themselves.
November 3, 2026
What CrowdStrike is buying
Fiddler AI, founded in 2018 and based in Palo Alto, builds observability and explainability software for AI agents. Its tools evaluate agents before deployment, trace their decisions, reasoning paths, and tool calls in production, detect behavioral drift and hallucinations, and track token usage and cost. CrowdStrike will sell the capability inside the Falcon platform as Falcon Observe, with general availability planned for its fourth quarter of fiscal 2027. The Journal reports CrowdStrike will pay roughly $400 million for Fiddler; CrowdStrike’s own announcement did not disclose a price.
Dreadnode, founded in 2023, works the other end of the lifecycle: automated security testing that probes AI models, applications, and agents for weaknesses before they reach production. Its findings will feed policy recommendations into Falcon Guardian and strengthen CrowdStrike’s SafeMind models, and the Dreadnode team will join the company’s Cyber Superintelligence Lab. The Journal puts Dreadnode’s price at about $95 million. Both deals are expected to close in CrowdStrike’s Q4 FY27, paid predominantly in cash with a portion in stock subject to vesting.
Why CrowdStrike wants a “flight recorder” for agents
CrowdStrike’s pitch is that agents create a new kind of risk: an agent can hold valid credentials and approved tools and still make unsupported decisions, ignore instructions, or claim work it never finished — no attacker required. CEO George Kurtz framed Fiddler as a flight recorder for agents, giving companies the ability to show a regulator or board exactly what an agent did and why. Paired with Falcon Guardian — which secures agents at runtime and gained new controls announced the same day — CrowdStrike is assembling coverage from pre-deployment testing through runtime protection to after-the-fact explanation.
Why it matters
This is consolidation arriving in AI security. Standalone agent-observability and AI red-teaming startups now have a well-capitalized exit path, and the large platform vendors are racing to own the “trust layer” for enterprise agents. For buyers, the practical question is whether observability and testing bundled into a security platform will match the depth of the specialist tools they replace. For the startups still independent in this space, CrowdStrike just set a price benchmark — roughly $495 million for the pair — and a deadline: differentiate, or become a feature.
Frequently asked questions
How much is CrowdStrike paying for Fiddler AI and Dreadnode?
CrowdStrike did not disclose prices. The Wall Street Journal reports about $400 million for Fiddler AI and about $95 million for Dreadnode, a combined $495 million, paid mostly in cash with some stock subject to vesting.
What does Fiddler AI do?
Fiddler provides observability and explainability for AI agents: pre-deployment evaluation, tracing of agent decisions and tool calls, detection of drift and hallucinations, and token-cost tracking. At CrowdStrike it becomes Falcon Observe.
What does Dreadnode do?
Dreadnode automates security testing of AI models, applications, and agents, hunting for weaknesses before deployment. Its team will join CrowdStrike’s Cyber Superintelligence Lab.
When do the deals close and the products ship?
Both acquisitions are expected to close in CrowdStrike’s fourth quarter of fiscal 2027, and both Falcon Observe and the automated AI security testing capability are slated for general availability in the same quarter.
Sources: CrowdStrike announcements via Business Wire; The Wall Street Journal.