Security

CrowdStrike pays a reported $495 million for Fiddler AI and Dreadnode and unveils an AI kill switch

The $495 million for Fiddler AI and Dreadnode came from the Wall Street Journal, not the company: mostly cash, closing in fiscal Q4 2027. Shareholders of a 49.8-times-book stock fund the layer that watches, tests and kills enterprise AI agents.

Vincent JiangVincent Jiang · 3 min read
Share
CrowdStrike co-founder and chief executive George Kurtz on stage at Web Summit
1 / 8Slide 1 of 8
CrowdStrike co-founder and chief executive George Kurtz. The company is buying Fiddler AI and Dreadnode for a reported $495 million and launched an AI kill switch for rogue agents.

A switch that kills an agent wherever it runs

At its Fal.Con Europe event on Tuesday, CrowdStrike+1.50% — CrowdStrike, up 1.50 percent as of its last quote unveiled an AI Kill Switch inside Falcon Guardian, its product for catching rogue AI agents, and agreed to buy the two startups behind the rest of the oversight layer for a reported $495 million 3.

A defender can terminate an agent that strays from its instructions, block it from relaunching, and cut its access to the corporate network 1. "AI safety is how you get the full benefit of AI," founder and chief executive George Kurtz said in the announcement. "When you deploy agents with a kill switch, you stay in control." 12

The price came from the Journal, not the company

The switch ships with two purchases. Fiddler AI, founded in 2018 and based in Palo Alto, watches and explains what agents do in production; it becomes Falcon Observe, generally available in fiscal Q4 2027 38. Dreadnode, founded in 2023, runs more than 100 attack strategies against models and agents, jailbreaks and prompt injection among them, before they reach production; its engineers join CrowdStrike's Cyber Superintelligence Lab 48.

The Wall Street Journal priced the pair at $495 million, roughly $400 million for Fiddler and $95 million for Dreadnode, mostly cash with a slice of stock under vesting conditions 34. CrowdStrike's own release names no figure, and both startups confirmed the deals on their homepages without terms 910. Shares rose 2.51% to $247.89 by mid-morning 5.

Four times raised for Fiddler, seven for Dreadnode

Who gains is arithmetic. Fiddler's investors put in about $99 million since 2018, per PitchBook, counting a $30 million Series C in January, and a $400 million exit returns roughly four times their money; Dreadnode raised $14 million and exits near seven times 47.

Who pays: shareholders, out of just over $5 billion in cash held at the quarter ended July 31, buying into a stock at 49.78 times book, where GuruFocus's 72-out-of-100 composite score marks its growth stronger than its profitability 56. It is the third priced acquisition CrowdStrike has announced this year, after SGNL at $740 million and Seraphic at a reported $420 million, both unveiled in January 4.

CrowdStrike's third priced acquisition of 2026 sits between January's SGNL and Seraphic deals

$0M$200M$400M$600M$800MSGNL$740MSeraphic$420MFiddler AI + Dreadnode$495M
Data
Value
SGNL$740M
Seraphic$420M
Fiddler AI + Dreadnode$495M
Prices as announced or reported: SGNL at $740 million and Seraphic at a reported $420 million, both in January; Fiddler AI and Dreadnode at a reported $495 million combined per the Wall Street Journal. CrowdStrike has not disclosed terms for the latest deal.4

Cash near $5 billion: the reported $495 million price is about a tenth of the pile

$3.5B$4B$4.5B$5B$5.5BQ2 '24Q4 '24Q2 '25Q4 '25Q2 '26$5.01B
Data
Cash and equivalents
Q1 '24$3.7B
Q2 '24$4.04B
Q3 '24$4.26B
Q4 '24$4.32B
Q1 '25$4.61B
Q2 '25$4.97B
Q3 '25$4.8B
Q4 '25$5.23B
Q1 '26$4.55B
Q2 '26$5.01B
CrowdStrike cash and equivalents at each quarter end, from its SEC filings, in US dollars. The quarter ended July 31, 2026 shows $5.01 billion.11

CrowdStrike paid about four times Fiddler's raised capital, seven times Dreadnode's

  • Total capital raised
  • Price paid, WSJ-reported
$0$100$200$300$400Fiddler AIDreadnode$95
Data
Total capital raisedPrice paid, WSJ-reported
Fiddler AI$99$400
Dreadnode$14$95
Capital raised per PitchBook and company announcements; prices per the Wall Street Journal, November 3, 2026. CrowdStrike has not disclosed terms.3,4,7

Customers' unproven agents are the market CrowdStrike is selling to

Enterprises are "deploying AI faster than they can prove it is secure," in Kurtz's words, and the Journal's $495 million figure puts a number on that gap 38. The risk sits with the customers, who must now buy oversight for agents already running inside their walls. Both deals close in fiscal Q4 2027, the quarter ending January 31, 2027, when Falcon Observe also reaches general availability and the filings show what the cash bought 48.

Get Security by email, free

The breaches, flaws and security vendors AI is putting to the test. In our daily email, every weekday.

Loading CRWD

Reader comments

0 comments

    More in Security

    All in this topic →

    Security

    Tenable's Q4 guide leaves out PHP2Shell demand, and CERT-FR flagged a 9.9 flaw in Tenable's own product

    Tenable beat its third quarter and ran nine sessions to a one-year high, but its own fourth-quarter guide prices the AI-and-PHP2Shell demand story at zero, and France's CERT-FR just flagged a 9.9 flaw in the company's identity product.

    Security

    Cellebrite's 154 European police contracts total €69.4 million, and the EU Ombudsman is probing the secrecy

    A Statewatch map counts 154 public contracts worth €69.4 million across Europe, EU funds included, while the Ombudsman probes EU secrecy over the company. CLBT reports Q3 on November 12.

    Security

    SailPoint wrote the rulebook for AI agent tool calls. The platforms bought it instead.

    SailPoint published the rulebook for policing AI agent tool calls on October 31. Workday, Cognition and Akamai spent October buying or shipping the same layer, and the December print must show whether anyone pays SailPoint for it.

    Security

    1,000 exposed GitLab servers later, the patch clock belongs to a partner

    Shadowserver counts 1,000-plus servers exposed to an actively exploited CVSS 10.0 GitLab bug and 11,300-plus to a second one, after CISA's federal deadline passed. GitLab's answer: a partner, RapidFort, now sells the hardened patch clock.

    Security

    Counterfeit Claude update puts the cleanup bill on enterprise buyers, not on Cursor

    Forged updates to Anthropic's Claude Code sat inside Cursor's official marketplace for about half a day and reached at most 5,000 developers. Five days on, no one has said how code published under Anthropic's name passed the marketplace's checks.

    Security

    CrowdStrike ships a model trained on AI attacks as SentinelOne launches a rival

    Fal.Con Europe opened in Barcelona with the first SafeMind-trained model due in Falcon this week, days after CrowdStrike reported an agent-driven campaign that hunted for machines without its sensor.

    Get the newsletter

    The day's AI and market news, in your inbox every weekday.