# CrowdStrike Agrees to Buy Fiddler AI and Dreadnode in Reported $495M Deal

- URL: https://usa-24.com/crowdstrike-fiddler-ai-acquisition/
- Publisher: USA 24
- Section: Artificial Intelligence (AI)
- Published: 2026-11-07T18:13:57.099Z
- Updated: 2026-11-07T18:13:57.103Z
- Topics: Cybersecurity, AI Agents, Mergers and Acquisitions, CrowdStrike, Enterprise Security

> CrowdStrike plans to buy Fiddler AI and Dreadnode in a reported $495 million deal that adds agent monitoring, pre-launch testing and an AI Kill Switch to Falcon.

## Key takeaways

- CrowdStrike plans to buy Fiddler AI and Dreadnode in deals the Wall Street Journal values at about $495 million combined, though CrowdStrike has not confirmed the prices.
- Fiddler AI monitors AI agents after deployment, and CrowdStrike will sell that technology inside Falcon under the name Falcon Observe.
- Dreadnode runs more than 100 known AI attack strategies and tests for prompt injection, jailbreaks and weaknesses in MCP servers before launch.
- The AI Kill Switch in Falcon Guardian can terminate unauthorized agents, block them from restarting and cut off their network access.
- Both deals are slated to close during CrowdStrike's fourth fiscal quarter of fiscal 2027, subject to customary conditions including regulatory approvals.

CrowdStrike plans to buy Fiddler AI and Dreadnode in a deal valued at about $495 million combined. The CrowdStrike Fiddler AI acquisition, along with the Dreadnode purchase, adds agent monitoring, pre-launch testing and a new emergency control, the AI Kill Switch, to the Falcon platform.

The deals were announced at CrowdStrike’s Fal.Con Europe conference in Barcelona. Outlets give different dates, from November 2 to November 4, so the exact announcement day remains unconfirmed until the company’s own release is checked.

CrowdStrike has already used AI to catch hackers. These acquisitions extend that work toward securing the AI systems themselves, [according to Crypto Briefing](https://cryptobriefing.com/crowdstrike-acquires-fiddler-ai-dreadnode/), and the focus is on agents that take actions without a person approving each step.

## What Fiddler AI and Dreadnode each bring

Fiddler works after an agent goes live. Founded in 2018 and based in Palo Alto, the company monitors agents once they are deployed. CrowdStrike will sell that technology inside Falcon under the name Falcon Observe.

In a [company statement reported by CyberScoop](https://cyberscoop.com/crowdstrike-acquires-fiddler-dreadnode-ai-security/), George Kurtz, CrowdStrike’s CEO and founder, described Fiddler as “The flight recorder for every agent.” Krishna Gade, Fiddler’s co-founder and CEO, said enterprises need to understand what their agents do, step in when those agents go off course and explain why they acted.

Dreadnode covers the earlier stage. Founded in 2023, and placed in Montana by one report, it tests AI systems before they ship. Its library includes more than 100 known AI attack strategies, and it ranks findings by severity, according to [Yahoo Finance](https://finance.yahoo.com/technology/ai/articles/crwds-acquisitions-fiddler-dreadnode-boost-143300088.html).

The pre-deployment testing targets prompt injection, jailbreaks and weaknesses in MCP servers, the systems AI agents use to do their work, as [Futurum reports](https://futurumgroup.com/insights/crowdstrike-buys-fiddler-and-dreadnode-to-test-watch-and-stop-ai-agents). In plain terms, Dreadnode tries to break an agent before attackers do.

## How much CrowdStrike is paying

The Wall Street Journal reported a combined value of about $495 million, including roughly $400 million for Fiddler and $95 million for Dreadnode, as relayed by [CityBiz](https://www.citybiz.co/article/928299/crowdstrike-to-acquire-fiddler-ai-dreadnode-in-reported-495m-deal/). CrowdStrike has not confirmed those figures, and the companies did not disclose purchase prices. [SiliconANGLE](https://siliconangle.com/2026/11/03/crowdstrike-to-acquire-cybersecurity-startups-fiddler-ai-dreadnode-for-reported-495m/) estimates that Fiddler accounts for about four-fifths of the total.

CrowdStrike said most of the consideration will be cash, with a portion paid in stock subject to vesting conditions. Neither the company nor the early reports have quantified what the deals will add to revenue or growth.

Investors reacted modestly. On November 3, CrowdStrike rose 0.78% in premarket trading to $243.70, [according to TradingKey](https://www.tradingkey.com/analysis/stocks/us-stocks/262267606-crowdstrike-crwd-us-ai-agend-fiddler-dreadnode-tradingkey). A premarket move reflects only the first hours of trading, so it says little about how the market will value the deals over time.

## What the AI Kill Switch does inside Falcon Guardian

The AI Kill Switch lives in Falcon Guardian and gives security teams three controls. They can terminate an unauthorized agent, block it from restarting and cut off its network access. Michael Devins, CrowdStrike’s director of product marketing, described the feature in a company blog post as a way to rapidly disrupt dangerous AI activity.

The kill switch is the runtime half of a loop that starts before launch. Dreadnode’s findings feed into Falcon Guardian as policy recommendations, so a weakness found in testing can turn into a rule the platform enforces after deployment. That pairing is the core of the strategy: test first, then watch and stop.

Security teams already isolate compromised laptops and servers to contain damage. An agent kill switch applies the same logic to software that can act on its own, which is a harder problem because an agent may run across many systems at once.

Attackers already use agents too. USA 24 has reported that a [China-linked group used AI agents to probe more than 200 organizations](https://usa-24.com/artex-ai-hacking-framework/), which is why defenders want a fast way to stop a rogue agent.

## Why AI agent security is on investors’ radar

AI-linked stocks sold off this week over worries about data-center buildout. According to AP, companies tied to that build-out fell on concern that Democratic victories in statehouses could slow construction, particularly in Texas. [AP reporting carried by the Washington Times](https://washingtontimes.com/news/2026/nov/6/ai-stocks-rebound-halt-brutal-worldwide-sell-wall-street-trims-loss) later said the stocks halted their sell-off and Wall Street trimmed its loss for the week.

Infrastructure is not the only pressure point. Enterprises face growing pressure to control agents that act on their own, and the risk is showing up in corporate disclosures. [AI Weekly reported](https://aiweekly.co/ai-news-today/edition/2026-11-05) that Apple’s annual filing reportedly warned AI agents may act without authorization. Data-center politics also shape the spending picture: [Google committed $17 billion to a Wyoming data center](https://usa-24.com/google-wyoming-data-center/) after midterm backlash.

The clearest signal is product strategy. When a major endpoint vendor pays for pre-launch testing and runtime kill switches, buyers are likely to expect both as standard features rather than optional add-ons.

## What the deals mean for Fiddler customers and CrowdStrike shareholders

Fiddler has customers who do not run CrowdStrike, and it is unclear whether it will keep selling to them once the deal closes, [as Futurum notes](https://futurumgroup.com/insights/crowdstrike-buys-fiddler-and-dreadnode-to-test-watch-and-stop-ai-agents). Existing customers should ask how their contracts, support and product access will change.

CrowdStrike gains a product line for a problem its customers already raise, while smaller AI security vendors now compete with a large company that has a broad installed base. Shareholders still lack revenue figures to judge the effect.

Timing is still open. [Security Today](https://securitytoday.com/articles/2026/11/05/crowdstrike-to-acquire-dreadnode-and-fiddler-ai.aspx) reported that both deals are slated to close during CrowdStrike’s fourth fiscal quarter of fiscal 2027, subject to standard closing conditions. [AI Weekly](https://aiweekly.co/alerts/crowdstrike-reportedly-to-pay-495m-for-fiddler-ai-dreadnode) puts the close by January 2027. The agreements carry customary conditions, including regulatory approvals, and no review timeline has been reported.

## Practical steps for teams running AI agents

Most organizations will not buy a startup, but the questions behind these deals apply to any team that runs agents. Start with these four moves:

- Inventory every AI agent in use, including tools that business teams adopted without IT approval.
- List what each agent can read, write and call, and remove access it does not need.
- Test how quickly you can stop an agent, then confirm that it cannot restart or reach your network afterward.
- Ask vendors whether they run pre-deployment security tests on their models and agents, and which attacks those tests cover, such as prompt injection and jailbreaks.

## What to watch as the deals close

The next signals will come from CrowdStrike’s filings, which should confirm or correct the $400 million and $95 million figures, and from any regulatory review. Watch whether Falcon Observe stays available to buyers who do not use Falcon, and whether competitors respond with agent monitoring or testing of their own. The AI Kill Switch will also show whether security teams trust automated shutdowns of agents in production, a question that will matter more as agents take on bigger jobs.

## Frequently asked questions

### How much is CrowdStrike paying for Fiddler AI and Dreadnode?

The Wall Street Journal reported a combined value of about $495 million, with roughly $400 million for Fiddler and $95 million for Dreadnode. CrowdStrike has not confirmed those figures, and the companies did not disclose purchase prices. CrowdStrike said most of the consideration will be cash, with part paid in stock subject to vesting conditions.

### What is the AI Kill Switch in Falcon Guardian?

The AI Kill Switch lets security teams terminate unauthorized AI agents, block them from restarting and cut off their network access. CrowdStrike introduced it in the same announcement as the acquisitions. Michael Devins, the company’s director of product marketing, described it as a way to rapidly disrupt dangerous AI activity.

### What is Falcon Observe?

Falcon Observe is the name CrowdStrike will use for Fiddler AI’s agent-observability technology inside its Falcon platform. Fiddler monitors AI agents after they are deployed. Fiddler also has customers who do not run CrowdStrike, so it is unclear whether the product will remain available outside Falcon.

### When will the CrowdStrike Fiddler AI and Dreadnode deals close?

Both deals are slated to close during CrowdStrike’s fourth fiscal quarter of fiscal 2027, subject to standard closing conditions. One report puts the close by January 2027. The agreements include customary conditions, including regulatory approvals, and no review timeline has been reported.

### What is AI red teaming?

AI red teaming means testing an AI system by simulating attacks before it goes live, so weaknesses surface early. Dreadnode runs more than 100 known AI attack strategies and ranks findings by severity. Its testing targets prompt injection, jailbreaks and weaknesses in the MCP servers that AI agents use.

## Sources

1. [CrowdStrike moves to acquire Fiddler and Dreadnode, adding AI observability and testing to its security platform](https://cyberscoop.com/crowdstrike-acquires-fiddler-dreadnode-ai-security/)
2. [CrowdStrike to acquire cybersecurity startups Fiddler AI, Dreadnode for reported $495M — SiliconANGLE](https://siliconangle.com/2026/11/03/crowdstrike-to-acquire-cybersecurity-startups-fiddler-ai-dreadnode-for-reported-495m/)
3. [CrowdStrike acquires Fiddler AI and Dreadnode (Business Briefing 11.04.26) — The Cyberwire](https://thecyberwire.com/newsletters/business-briefing/8/44)
4. [CrowdStrike to Acquire Dreadnode and Fiddler AI — Security Today](https://securitytoday.com/articles/2026/11/05/crowdstrike-to-acquire-dreadnode-and-fiddler-ai.aspx)
5. [CrowdStrike Buys Fiddler and Dreadnode to Test, Watch, and Stop AI Agents — Futurum](https://futurumgroup.com/insights/crowdstrike-buys-fiddler-and-dreadnode-to-test-watch-and-stop-ai-agents)
6. [Will CRWD's Acquisitions of Fiddler and Dreadnode Boost its AI Growth? — Yahoo Finance](https://finance.yahoo.com/technology/ai/articles/crwds-acquisitions-fiddler-dreadnode-boost-143300088.html)
7. [CrowdStrike reportedly to pay $495M for Fiddler AI, Dreadnode — AI Weekly](https://aiweekly.co/alerts/crowdstrike-reportedly-to-pay-495m-for-fiddler-ai-dreadnode)
8. [CrowdStrike to acquire Fiddler AI and Dreadnode for $495 million — Crypto Briefing](https://cryptobriefing.com/crowdstrike-acquires-fiddler-ai-dreadnode/)
9. [CrowdStrike to Acquire Fiddler AI, Dreadnode in Reported $495M Deal — CityBiz](https://www.citybiz.co/article/928299/crowdstrike-to-acquire-fiddler-ai-dreadnode-in-reported-495m-deal/)
10. [CrowdStrike Up 0.78% Pre-Market: Reportedly Plans to Spend $495 Million to Acquire Two AI Security Firms — TradingKey](https://www.tradingkey.com/analysis/stocks/us-stocks/262267606-crowdstrike-crwd-us-ai-agend-fiddler-dreadnode-tradingkey)
11. [AI stocks halt their brutal, worldwide sell-off as Wall Street trims its loss for the week — AP via Washington Times](https://washingtontimes.com/news/2026/nov/6/ai-stocks-rebound-halt-brutal-worldwide-sell-wall-street-trims-loss)
12. [AI News for November 5, 2026 — Daily Edition — AI Weekly](https://aiweekly.co/ai-news-today/edition/2026-11-05)