CrowdStrike announced definitive agreements on Tuesday to acquire two artificial intelligence security startups, Fiddler AI and Dreadnode, moves the cybersecurity giant says will help it catch misbehaving AI agents before they cause damage. The deals come as companies race to deploy AI agents across their operations, often without fully understanding how those systems make decisions or whether they can be manipulated.
The Wall Street Journal reported the two acquisitions were valued at a combined $495 million, with roughly $400 million going toward Fiddler and about $95 million for Dreadnode, according to a report cited by TradingView. CrowdStrike itself did not disclose purchase prices in its own announcements of either deal. The company did say the combined purchase price would be paid predominantly in cash, with a portion delivered in stock subject to vesting conditions, according to CrowdStrike investor relations.
What Each Startup Brings to the Table
Fiddler will bring pre-deployment evaluation, continuous behavioral accountability, and agent explainability to CrowdStrike's Falcon platform, the company said in its announcement. Fiddler's capabilities are set to be sold as part of Falcon under the name Falcon Observe, with general availability expected in CrowdStrike's fourth fiscal quarter of 2027, per the same investor relations statement.
Dreadnode, meanwhile, is designed to continuously test every AI model, application, and agent for security weaknesses before deployment, CrowdStrike said. The platform runs more than 100 known AI attack strategies, including jailbreaks and prompt injection, according to the company's release. CrowdStrike said the Dreadnode team will join its Cyber Superintelligence Lab once the deal closes, which the company expects to happen during its fourth quarter of fiscal 2027, subject to customary closing conditions.
Part of a Bigger AI Security Push
The acquisitions follow a broader strategy CrowdStrike laid out at its Fal.Con 2026 conference, where it unveiled a four-part approach to securing enterprise AI. That plan includes Falcon Guardian for runtime protection, Agentic IdP for giving AI agents unique identities, SafeMind for security-specific AI models, and an expanded agentic security operations center, as reported by Forbes.
The Fiddler and Dreadnode purchases arrive amid a surge of consolidation in cybersecurity, much of it driven by anxiety over AI's security gaps. Cybersecurity mergers and acquisitions hit 117 in the third quarter of 2026 alone, according to Momentum Cyber data cited by Dark Reading. AI security deals specifically jumped to 40 in the first three quarters of the year, up from just 10 during all of 2025, the outlet reported. Momentum Cyber projects overall cybersecurity M&A will reach 450 deals in 2026, up from 404 the year before.
Other AI Security Shopping Sprees
CrowdStrike isn't the only major AI player on a buying spree. Anthropic agreed to acquire confidential-AI company Opaque Systems, while Cohere signed a letter of intent to acquire Prague-based AI cybersecurity startup Aisle without disclosing financial terms, according to reports from SecurityWeek and The Globe and Mail. SecurityWeek tracked 37 cybersecurity M&A deals announced in October 2026 alone, including Hex-Rays' reported $30 million to $35 million purchase of Israeli startup HexAI and Belgian firm Aikido Security's acquisitions of OutKept and Cyberly, which it used to launch a new workforce security business called Noon.
Taken together, the flurry of deals underscores how urgently cybersecurity vendors are racing to get ahead of a problem they largely created: AI agents that can act autonomously inside corporate systems, often faster than human security teams can monitor them. CrowdStrike's twin acquisitions are a bet that pairing observability with automated attack testing can close that gap before it becomes the next major breach vector.
