CrowdStrike agreed to buy two small security companies for $495 million. The purchase is aimed at a problem its customers have created for themselves: software agents that now hold passwords, open tickets and move money inside corporate networks, with little in place to watch what they do.
About $400 million of the price goes to Fiddler AI, a Palo Alto company founded in 2018 that sells software for monitoring and explaining the behavior of artificial-intelligence agents. The remaining $95 million buys Dreadnode, an automated security-testing platform started in 2023 that hunts for flaws in AI models before they are put to work.
Most of the consideration is cash, with the balance in restricted stock that vests over time, according to the announcement. CrowdStrike said it intends to fold both products into Falcon, its cloud-delivered security platform, early next year.
“We are well past the testing phase. Enterprises are deploying AI agents at scale,” Mike Sentonas, the company’s president, said in the statement. The line is aimed at buyers who have spent two years running pilots and now have something in production that nobody fully audits.
CrowdStrike built its franchise on a single lightweight sensor installed on laptops and servers, then sold additional modules to the same customers: identity protection, cloud workload security, threat intelligence, exposure management. Each new module raised revenue per customer without adding a new sales relationship, which is why the company’s gross margins and growth rate have moved together for years.
An agent breaks the assumptions inside that model. It is a program handed a set of credentials and permission to act: it reads mail, files expense reports, queries a database, calls a payment API on someone’s behalf. Its behavior varies from one run to the next, and the record it leaves behind shows outcomes rather than reasons.
Conventional security tools log which file executed and which connection opened. They do not log why an assistant decided to approve an invoice, or which sentence in a supplier’s document pushed it that way.
That gap is what Fiddler sells into. Its software records what a model or an agent did, attaches an explanation of the inputs that drove the output, and raises a flag when behavior drifts from what was tested. The company was founded in 2018 and initially found customers among firms that had to justify automated decisions to regulators or to their own risk committees, a requirement that has since spread to any company putting a model in front of a customer.
Dreadnode attacks from the other side. Its platform runs automated tests against a model or an agent before launch, probing for prompt injection, excessive tool permissions, data leaking through an output channel, and the quieter failure in which an agent completes a task the wrong way and reports success. Firms that once hired consultants for a two-week red-team exercise can now run the same tests on every build.
The two acquisitions fit a pattern at CrowdStrike, which has grown mostly by buying small teams with a product and a handful of reference customers rather than by building each category from scratch. The price is modest against the company’s own scale, and the mix of cash and restricted stock limits dilution while tying the founders to the integration. A purchase under $100 million for a three-year-old firm is closer to an acqui-hire than to a platform deal, and the retention terms matter more than the technology license.
Buyers are consolidating security vendors, not adding them. Chief information security officers have spent several years trimming overlapping tools, and a vendor that can put agent monitoring on the same console as endpoint protection has an argument that a standalone startup does not. Microsoft has been adding AI security features to its cloud offerings, and Palo Alto Networks and SentinelOne have made similar moves, which puts pressure on smaller specialists to sell to a larger platform or compete on depth alone.
Regulation is pulling in the same direction. European rules now require operators of high-risk AI systems to keep logs of how those systems behave, and auditors have begun asking for evidence that an agent’s actions were reviewed. Compliance departments that until recently had no vocabulary for the problem are writing requirements into procurement checklists, which tends to favor vendors already on the approved list.
The risks sit in the integration. Fiddler and Dreadnode sell to security and platform teams that may not report to the same buyer CrowdStrike’s sales force calls on, and both products need to be repriced and repackaged before they can be sold as modules on the Falcon contract. Companies that buy young firms routinely lose the founders within two years, and the restricted stock is meant to prevent that.
There is also a question of whether customers will pay separately for watching agents. Many already assume monitoring comes with the assistant they bought, and platform vendors have a habit of absorbing adjacent features into the base price once a competitor offers them.
CrowdStrike has not disclosed revenue for either target, and neither product is large enough to move the company’s results next year. What the deals reveal is where the company expects the next budget line to appear. Security spending has survived every round of cost cutting because it is the expense a board will not approve removing. Spending on the behavior of software that acts on its own is likely to be judged the same way, once an agent has done something expensive.
