Cybersecurity firm CrowdStrike will acquire AI observability startup Fiddler to launch a new product called Falcon Observe, CrowdStrike announced on November 3 at its Fal.Con EU conference. The company is also acquiring AI security-testing startup Dreadnode, for a combined price near $500 million, TechCrunch reported, citing the Wall Street Journal.
What CrowdStrike has confirmed directly
CrowdStrike’s own blog post, written by Michael Sentonas, confirms the Fiddler acquisition and describes Falcon Observe’s purpose: letting security teams compare prompts, models and configurations before an AI agent deploys, then trace the agent’s decisions and reasoning across its full hierarchy after deployment to catch behavioral drift and pinpoint where a failure happened. Fiddler will become generally available inside the Falcon platform as Falcon Observe in CrowdStrike’s fourth fiscal quarter of FY27.
CrowdStrike’s announcement does not disclose a purchase price for Fiddler. Falcon Observe will support OpenTelemetry instrumentation and frameworks including LangGraph, Amazon Bedrock, AWS Strands and Google ADK, and will link agent behavior to Falcon’s existing telemetry across endpoints, identity, cloud and runtime.
The split between before and after deployment matters for how security teams will actually use the product. Before an agent goes live, Falcon Observe lets a team compare different prompts, models and configurations against each other to check whether the agent performs its intended task safely and accurately, essentially testing it before it can cause harm. Once the agent is running in production, the same tool switches to tracing its actual decisions and reasoning paths across the full agent hierarchy, which is how a security team would catch behavioral drift or isolate the exact step that caused a failure after the fact.
What the reported deal values say
TechCrunch, citing the Wall Street Journal, reported the Fiddler deal at roughly $400 million and the Dreadnode deal at roughly $95 million, putting the combined price near $495 million, close to the “nearly $500M” figure in TechCrunch’s own headline. Neither figure has been confirmed by CrowdStrike itself.
Fiddler was founded in 2018 and has raised about $99 million, according to PitchBook data cited by TechCrunch. Dreadnode, the smaller of the two deals, was founded in 2023 and has raised about $14 million. Dreadnode’s technology automates security testing to find flaws in AI models, applications and agents, and CrowdStrike plans to fold it into Falcon Guardian, its existing AI agent security product.
Why CrowdStrike is buying into AI agent security now
CrowdStrike frames Falcon Guardian and Falcon Observe as two halves of the same problem: Guardian protects AI agents from attacks and misuse, while Observe evaluates and explains what those agents are actually doing. As companies move from experimenting with AI chatbots to deploying autonomous agents that take real actions inside enterprise systems, that gap between “is the agent secure” and “is the agent doing what it’s supposed to” has become a specific product category of its own, one CrowdStrike is now assembling through acquisition rather than building from scratch.
This is not CrowdStrike’s first AI-security purchase in 2026. The company has made a string of acquisitions this year expanding its identity and AI security lines, a pattern that places the Fiddler and Dreadnode deals inside a broader buildout rather than a one-off bet.
Dreadnode’s role in that buildout is narrower but specific: its technology automates the kind of adversarial testing that tries to break an AI model, application or agent on purpose, surfacing the flaws before an attacker finds them. Folding that into Falcon Guardian means CrowdStrike customers get the testing and the protection from the same vendor rather than stitching together tools from separate startups, which TechCrunch’s framing of “the market for securing agents takes off” points to as the broader trend driving both acquisitions.
Frequently asked questions
Has CrowdStrike confirmed the Dreadnode acquisition itself?
CrowdStrike’s own blog post covers only the Fiddler deal and Falcon Observe. The Dreadnode acquisition and both deal values come from TechCrunch’s reporting, citing the Wall Street Journal.
When will Falcon Observe be available?
CrowdStrike says it will become generally available within the Falcon platform in the company’s fourth fiscal quarter of FY27.
What is the difference between Falcon Guardian and Falcon Observe?
Per CrowdStrike, Guardian protects AI agents from attacks and misuse. Observe, built from Fiddler’s technology, evaluates and explains what an agent actually did and why.
Watch for CrowdStrike to confirm the Dreadnode deal and its terms directly, and for Falcon Observe’s rollout details as the FY27 fourth quarter approaches. Rival security vendors are chasing the same AI agent security category, so how quickly CrowdStrike actually ships Falcon Observe and folds in Dreadnode’s testing tools will matter more than the acquisition announcement itself.
Leave a Reply