CrowdStrike to Buy Fiddler AI and Dreadnode for Reported US$495M

CrowdStrike, the cybersecurity company led by co-founder and CEO George Kurtz, agreed to buy two AI security companies, Fiddler AI and Dreadnode, and announced both on Tuesday at its Fal.Con Europe conference in Barcelona. Reported terms put Fiddler at roughly US$400M and Dreadnode at about US$95M, mostly in cash with a portion in stock subject to vesting conditions. Both deals are expected to close in CrowdStrike’s fourth quarter of fiscal 2027, pending standard approvals.

The two companies cover different stages of an AI agent’s life. Fiddler was launched by CEO Krishna Gade and CPO Amit Paka. It tracks and explains what agents do once they are running, and will become Falcon Observe on CrowdStrike’s platform. Dreadnode was co-founded by Will Pearce and Nick Landers, and Brad Palm now serves as its chief executive. Its software runs more than 100 known attack methods against models and agents to find flaws before they go live. The rationale, according to CyberScoop, is that agents can hold valid credentials and approved tools yet still make bad decisions, while traditional security testing does not reach the model layer or the agent’s reasoning.

Market Context

The deals arrive as spending on AI-specific protection accelerates. Gartner projects the market for securing AI will reach almost US$4.8 billion in 2027, up 68.7% from 2026, and nearly US$7.7 billion by 2028. CrowdStrike is not alone in chasing it. Palo Alto Networks has bought AI-focused firms including Portkey and Koi. Several startups and vendors have also raised tens of millions on the premise that existing security software can’t adequately monitor and control AI tools.

CrowdStrike is buying from a position of financial strength. In its fiscal second quarter, ARR grew 25% year-over-year to US$5.84 billion, and cash reached US$5.01 billion. The company attributed that performance partly to broader AI adoption across large organizations. Both targets are small relative to the price. Fiddler has raised about US$99 million to date, according to PitchBook, while Dreadnode has raised US$14 million.

The Signal

“saying ‘the model did it’ is not an answer” — George Kurtz, CEO, CrowdStrike, on what boards and regulators will expect when they ask what an AI agent did.

Regional Relevance

For the United States, all three companies are U.S.-based, so the deal points to a shift in how American enterprises will buy AI. The security budget is moving beyond “keep attackers out” toward auditing and controlling autonomous software. Fiddler’s records are designed to support audits, and Dreadnode maps findings to the NIST AI Risk Management Framework, the federal standard that U.S. compliance teams increasingly reference. Fiddler also has a government footprint: it lists the U.S. Navy among its customers and In-Q-Tel and Lockheed Martin among its backers. That background could strengthen CrowdStrike’s pitch to public-sector buyers.

For Europe and the startup ecosystem, the decision to announce the deal at Fal.Con Europe in Barcelona signals that CrowdStrike sees AI governance demand as global. European buyers face their own regulatory pressure to explain automated decisions. For the venture market, a roughly US$95M exit for Dreadnode, is a quick outcome in an emerging category. Its US$14M Series A was led by Decibel, so the exit validates the bet. It also suggests that large platforms may absorb AI security specialists before those specialists can scale independently.

The Other Side

Is the price justified for companies this young? The roughly US$400M valuation for Fiddler is about four times the capital it has raised, based on PitchBook data. Supporters would argue that CrowdStrike is paying for time to market in a segment growing about 70% a year. Skeptics would note that undisclosed revenue makes the multiple hard to judge.

Will enterprises want AI security from their endpoint vendor? Consolidation is CrowdStrike’s core strategy, and buyers often prefer fewer tools. Still, competition is intensifying as both established vendors and AI-focused specialists try to set the standards for managing AI risk. Some buyers may prefer neutral tools that work across vendors.

Can testing keep pace with how agents fail? Dreadnode’s library of known attacks helps, but known attacks are only part of the threat. Gartner expects more than half of successful attacks on AI agents by 2029 to exploit access-control weaknesses and prompt injections. Novel failure modes may still outrun pre-deployment testing, which is why CrowdStrike is also adding runtime controls such as its new AI Kill Switch.

Sources & Transparency

• TechCrunch — CrowdStrike to shell out nearly $500M for 2 AI security startups as the market for securing agents takes off
• CyberScoop — CrowdStrike moves to acquire Fiddler and Dreadnode, adding AI observability and testing to its security platform
• Dealroom — CrowdStrike to buy AI security startups Fiddler and Dreadnode for $495M
• The Next Web — CrowdStrike agrees to buy AI security startups Fiddler and Dreadnode
• CrowdStrike Investor Relations — CrowdStrike Reports Second Quarter Fiscal Year 2027 Financial Results
• Gartner — Gartner Forecasts the Market for Securing AI Will Reach $4.8 Billion in 2027
• SecurityWeek — Offensive AI Startup Dreadnode Secures $14M to Stress-Test AI Systems