Cybersecurity
CrowdStrike Acquires Fiddler AI and Dreadnode to Strengthen AI Security
The acquisitions will add AI agent monitoring and automated security testing to CrowdStrike's Falcon platform as the company expands its efforts to secure autonomous systems.
[For more news, click here]
CrowdStrike has signed definitive agreements to acquire Fiddler AI and Dreadnode, bringing two specialized AI security companies into its business. Announced on November 3 at Fal.Con Europe 2026, the acquisitions will add AI observability, explainability and automated security testing to the company's Falcon platform.
Each acquisition addresses a different part of the AI security process. Fiddler specializes in monitoring AI systems and explaining their decisions, while Dreadnode develops technology to identify vulnerabilities in AI models, applications and agents before deployment. Integrating both technologies into Falcon will extend CrowdStrike's capabilities for securing AI agents across enterprise environments.
Financial terms have not been disclosed. Both transactions are expected to close during CrowdStrike's fourth quarter of fiscal 2027. Consideration for each acquisition will be predominantly in cash, with a portion delivered in stock subject to vesting conditions.
Fiddler AI to Bring Agent Monitoring to Falcon
Under the planned integration, Fiddler's technology will become part of Falcon as Falcon Observe, with general availability expected in Q4 FY27. The offering will allow organizations to evaluate AI agents before deployment and monitor their behavior in production. Its capabilities include tracing agent decisions, reasoning paths and interactions with tools, while identifying hallucinations, behavioral changes and actions that fall outside an agent's intended task.
Compatibility with several AI development frameworks, including LangGraph, Amazon Bedrock, AWS Strands and Google ADK, will allow enterprises to monitor agents built across different environments. Fiddler also brings AI evaluation and cost-monitoring capabilities. According to CrowdStrike, its purpose-built models can reduce evaluation costs by up to 98% without requiring external large language model calls.
For businesses giving agents access to internal applications and sensitive information, understanding how those systems reach decisions is increasingly important. An agent can have legitimate permissions but still misunderstand an instruction or perform an unintended action. Fiddler's technology is designed to help security teams trace that activity and determine what happened.
Dreadnode Adds Automated AI Security Testing
While Fiddler focuses on monitoring agent behavior, Dreadnode's technology will identify security weaknesses before AI systems enter production. It tests AI models, applications, agent reasoning processes and Model Context Protocol (MCP) servers using more than 100 known attack strategies, according to CrowdStrike. These include prompt injection, jailbreaks, multi-turn attacks and techniques targeting AI agents.
Findings are ranked by severity and mapped against established security frameworks, including the OWASP Top 10 for LLMs, OWASP Agentic Security, MITRE ATLAS and the NIST AI Risk Management Framework. The platform also scans models and supporting components for vulnerabilities, helping security teams assess potential weaknesses before deployment.
As part of the acquisition, Dreadnode's team will join CrowdStrike's Cyber Superintelligence Lab and contribute to SafeMind, the company's research into evaluating the security and cyber capabilities of advanced AI models. Its testing findings will also inform policy recommendations for Falcon Guardian, helping translate identified vulnerabilities into stronger protections for agents operating in enterprise environments.
How the Acquisitions Fit Into CrowdStrike's Strategy
CrowdStrike has been developing Falcon Guardian to protect AI agents against attacks and misuse. The addition of Fiddler and Dreadnode will extend those capabilities through agent monitoring and pre-deployment testing. While Guardian addresses runtime protection, Falcon Observe will provide visibility into agent behavior, and Dreadnode's technology will identify weaknesses before deployment.
The acquisitions come as enterprises introduce autonomous systems into business applications and workflows, giving them access to information and tools previously handled directly by employees. This creates new security challenges, including assessing vulnerabilities within AI models and monitoring the actions agents take after gaining access to enterprise systems.
By bringing these capabilities into Falcon, CrowdStrike is extending its endpoint, identity and cloud security business into enterprise AI security. Falcon Observe and Dreadnode's Automated AI Security Testing are both planned for general availability in Q4 FY27, following completion of the acquisitions.
The commercial value of the move will depend on how effectively the technologies are integrated and how readily enterprise customers adopt them. The agreements give CrowdStrike two specialized capabilities as businesses increasingly rely on AI agents to perform tasks across enterprise environments.
Related Articles
Exclusive: AI Agents Are Proliferating While Oversight Remains Dangerously Absent
