Two agreements, no figure
CrowdStrike announced on Tuesday that it has signed definitive agreements to acquire Fiddler AI, which monitors and explains what AI agents do, and Dreadnode, which attacks AI systems to find weaknesses before they are deployed. Both releases carry an Austin dateline and were issued from the company’s Fal.Con Europe conference in Barcelona.
Neither names a price. CrowdStrike says only that each will be paid primarily in cash, with a portion in stock subject to vesting conditions, and that both deals are expected to close in its fourth quarter of fiscal 2027. The Wall Street Journal reported about $400m for Fiddler and $95m for Dreadnode, roughly $495m in total; CyberScoop notes that CrowdStrike disclosed nothing.
What Fiddler brings
Fiddler AI, founded in 2018 and based in Palo Alto, will be sold as Falcon Observe. CrowdStrike says it evaluates an agent’s accuracy, task completion and policy compliance before deployment, then traces the agent’s decisions, reasoning and tool calls in production and flags behavioural drift, hallucinations and unintended actions. The release claims it can reduce the cost of evaluation by up to 98% — CrowdStrike’s own figure, not an independent measurement — and lists support for OpenTelemetry alongside LangGraph, Amazon Bedrock, AWS Strands and Google ADK.
“Fiddler is the flight recorder for every agent,” said George Kurtz, CrowdStrike’s chief executive and founder.
What Dreadnode brings
Dreadnode’s platform runs more than 100 known attack strategies — jailbreaks, prompt injection, multi-turn and agent-specific attacks — against models, agent reasoning loops, applications and MCP servers. It ranks what it finds by severity, maps each finding to the OWASP Top 10 for large language models, OWASP Agentic Security, MITRE ATLAS and the NIST AI Risk Management Framework, and exports reports intended for go or no-go decisions.
Those findings will feed Falcon Guardian as policy recommendations, and Dreadnode’s team joins CrowdStrike’s Cyber Superintelligence Lab, which the company established earlier this year. “We founded Dreadnode to expose those weaknesses before AI reaches production,” said Brad Palm, Dreadnode’s chief executive.
One problem split in two
Taken together the two deals describe a single bet: that enterprises will pay to test an agent before it runs and to reconstruct what it did afterwards. CrowdStrike is buying the before and the after rather than building either. It announced a third piece the same day, an AI Kill Switch in Falcon Guardian, which stops an agent while it is running.
The timing is unusually tight. Both acquisitions are expected to close in the fourth quarter of fiscal 2027, and both products — Falcon Observe and Automated AI Security Testing — are promised as generally available in that same quarter.
What to watch
Whether CrowdStrike puts a number on either deal in its next quarterly filing, and whether the 98% evaluation-cost claim survives contact with customers who are not using it inside a CrowdStrike demo. Until the filings land, the only prices attached to these two companies are the Journal’s.
