THE ESSENTIALS IN 30 SECONDS

  • CrowdStrike announced definitive agreements on November 3 to acquire Fiddler AI and Dreadnode, mostly for cash, with closing expected in its fourth quarter of fiscal 2027.
  • CrowdStrike did not disclose prices; the Wall Street Journal reported about $400 million for Fiddler and $95 million for Dreadnode.
  • Fiddler is to become Falcon Observe, while Dreadnode's automated testing will feed Falcon Guardian, which also gains an 'AI Kill Switch'.

CrowdStrike said on November 3, at its Fal.Con Europe conference in Barcelona, that it has signed definitive agreements to buy two young companies focused on AI agents: Fiddler AI, which tracks and explains what agents do, and Dreadnode, which probes AI systems for weaknesses before they go live. Both deals are to be paid mostly in cash, with a share in stock subject to vesting, and are expected to close in CrowdStrike's fourth fiscal quarter of 2027, pending customary conditions.

What CrowdStrike is buying

Fiddler, based in Palo Alto and led by co-founder and CEO Krishna Gade, evaluates agents before deployment, follows their behavior in production and records why they made a given decision, producing logs that can be used for audits. CrowdStrike plans to rebrand it as Falcon Observe; CEO George Kurtz called it "the flight recorder for every agent."

Dreadnode, run by CEO Brad Palm, automates attack testing. According to CrowdStrike, it throws more than 100 known techniques, including jailbreaks, prompt injection and multi-step agent attacks, at models, agent reasoning loops, applications and MCP servers. Findings are ranked by severity and mapped to frameworks such as the OWASP Top 10 for LLMs, MITRE ATLAS and the NIST AI Risk Management Framework. The results are meant to feed Falcon Guardian, CrowdStrike's runtime protection for agents, as policy recommendations, and the Dreadnode team will join the company's research lab.

Price and product plans

CrowdStrike did not disclose what it is paying. The Wall Street Journal, as cited by CyberScoop and SiliconANGLE, reported roughly $400 million for Fiddler and $95 million for Dreadnode, or about $495 million combined. CrowdStrike has not confirmed those figures.

Alongside the deals, the company added an "AI Kill Switch" to Falcon Guardian. SiliconANGLE reports it lets administrators shut down an agent behaving riskily, cut its network access and stop it from restarting. Falcon Observe and the automated testing service are expected to be generally available in the same fiscal quarter as the closing.

Why it matters

The deals show large security vendors moving to cover the full lifecycle of enterprise AI agents, from pre-launch testing to monitoring and emergency shutdown. How well the acquired tools integrate, and whether the kill switch works across the range of platforms where agents run, will only become clear once the products ship.