What happened
- CrowdStrike announced on 3 November 2026, at its Fal.Con Europe conference, that it will buy Fiddler AI and Dreadnode, two companies focused on the security of AI models and agents.
- According to The Wall Street Journal, cited by TechCrunch, it will pay about US$400 million for Fiddler and about US$95 million for Dreadnode.
- Fiddler, founded in 2018, makes observability software: it records and explains what agents do inside a company. It will be renamed Falcon Observe and CrowdStrike expects it to be available in the fourth quarter of its 2027 fiscal year.
- Dreadnode, founded in 2023, automates security testing to find flaws in models, apps and agents before they go into production. It will be folded into Falcon Guardian, CrowdStrike’s agent control product.
Why it matters
- An agent does not need to be attacked to cause harm, CrowdStrike warns. It can make a bad decision using valid credentials and approved tools, and traditional controls will see legitimate activity.
- The company’s example is an agent that approves a refund violating internal policy. Observability would show why it made that decision and at which step it went wrong.
- Auditors, regulators and boards are starting to ask for that record, according to CrowdStrike, and companies are deploying agents faster than they adjust their security policies.
The number
US$495 million. That is the approximate total of the two purchases, according to The Wall Street Journal: about US$400 million for Fiddler and US$95 million for Dreadnode.
Context
According to PitchBook, cited by TechCrunch, Fiddler had raised about US$99 million and Dreadnode US$14 million. CrowdStrike was already building Falcon Guardian to see what agents do on a company’s devices; with these deals it adds evaluation before deployment and monitoring after. Fiddler lets teams compare prompts, models and configurations before production, then trace each agent’s decisions across the whole hierarchy to detect behavioural drift.
Agent control is a topic Mamífero follows. We reported that Island raised US$400 million to watch agents inside the company and that vulnerability remediation is adding AI and risk controls. Also that METR and Redwood found ways to evade OpenAI’s agent monitor and that AI agents already attack real systems and security is no longer optional.
What’s next
- Falcon Observe should be available in the fourth quarter of CrowdStrike’s 2027 fiscal year.
- Dreadnode will feed its test results into Falcon Guardian as security policy recommendations.
- The deals must close on the usual timelines for such transactions; CrowdStrike did not detail conditions.
Bottom line
CrowdStrike is betting that agent security will not be solved with antivirus or firewalls but with a record of what each agent decided and why. It is buying both halves of that work: testing before and watching after.
Sources
- CrowdStrike, “CrowdStrike to acquire Fiddler”, 3 November 2026, crowdstrike.com
- Iyer, R., “CrowdStrike to shell out nearly $500M for 2 AI security startups as the market for securing agents takes off”, TechCrunch, 3 November 2026, techcrunch.com, citing The Wall Street Journal and PitchBook
- Cover image: Coolcaesar, CC BY 4.0, via Wikimedia Commons
Edited by Rodrigo Cornejo. How we select and verify: who writes these notes.
