TL;DR
CrowdStrike has agreed to acquire Fiddler AI and Dreadnode, combining plans for agent observability with automated AI security testing. Reported prices put the proposed deals near $495 million, but CrowdStrike has not disclosed the financial terms. The acquisitions are not yet closed, and the announced products are not yet generally available.
Why this matters now
Agent deployments introduce two distinct questions: can an attacker manipulate the system, and can its operator explain an action that was never supposed to happen? A test before launch cannot answer everything about production behavior; a trace after an incident cannot prevent every attack. CrowdStrike’s November 3 announcements attempt to bring both into the same security platform. (Source : CrowdStrike — Fiddler agreement; CrowdStrike — Dreadnode agreement)
According to TechCrunch, citing The Wall Street Journal, the proposed price is around $400 million for Fiddler and $95 million for Dreadnode. SecurityWeek reports that CrowdStrike has not disclosed either deal’s financial terms. The sum is therefore a reported estimate, not a company-confirmed purchase price. (Source : TechCrunch — CrowdStrike’s two AI security deals; SecurityWeek — Reported acquisition prices)
Fiddler: observability is not a security verdict
CrowdStrike plans to sell Fiddler as Falcon Observe, with general availability in Q4 of its fiscal 2027. The company says the offering will evaluate agents before deployment and trace their decisions and tool calls in production. It lists OpenTelemetry, LangGraph, Amazon Bedrock, AWS Strands and Google ADK among the supported instrumentation and frameworks. (Source : CrowdStrike — Fiddler agreement)
This is valuable because a valid identity and permitted tool do not guarantee a sensible outcome. An agent might have permission to read a document and send a message, yet send the wrong document to the wrong recipient. Traces can help reconstruct that chain and support review, but a trace is evidence of recorded activity, not proof that all reasoning or business context was captured. Buyers should ask which tool calls are actually instrumented, what is retained and whether sensitive prompts are redacted.
Dreadnode: test before granting access
CrowdStrike says Dreadnode runs more than 100 known AI attack strategies against models, applications, agent reasoning loops and MCP servers. Its planned integration would feed findings to Falcon Guardian as policy recommendations. The company expects automated AI security testing to be generally available in Q4 FY27. (Source : CrowdStrike — Dreadnode agreement)
A library of attack strategies is not the same as a measured success rate: the announcement does not establish how many attacks a customer’s particular agent will resist. A useful evaluation would exercise the actual connectors, permissions and data boundaries of the deployment, repeat tests after changes, and track both missed attacks and false alarms. This complements, rather than replaces, the development-stage safety work discussed in our analysis of Microsoft RAMPART and Clarity.
The runtime gap
CrowdStrike also says its AI Kill Switch is available at the gateway now, with endpoint termination to follow. That distinction matters: a control that stops gateway-mediated activity should not be assumed to stop every local process today. CrowdStrike says endpoint network inspection is generally available on Windows, with Mac in early access. (Source : CrowdStrike — Falcon Guardian announcement)
The proposed architecture is a loop: test an agent, observe it in production, then intervene when necessary. The weak point is the handoff between those layers. If an evaluation finds a prompt-injection path, an operator still needs to verify that a policy covers the relevant agent, connector and execution environment. A recommendation is not necessarily an enforced control.
Both proposed acquisitions are expected to close in CrowdStrike’s fourth quarter of FY27, subject to customary conditions. CSO Online reports that the same quarter is the target for general availability and warns against treating a roadmap as demonstrated integration. Customers should obtain details on pricing, data handling, retention, API access and service continuity before making a purchase decision. (Source : CrowdStrike — Dreadnode agreement; CSO Online — Governance and integration)
FAQ
Are the acquisitions complete?
No. CrowdStrike announced definitive agreements, with closing expected in Q4 FY27 subject to conditions.
Is $495 million an official price?
No. The reported amounts come from press coverage citing The Wall Street Journal; CrowdStrike has not disclosed the terms.
Will testing eliminate prompt injection?
No test suite establishes universal protection. Its value depends on coverage of the deployed agent, tools and real-world attack paths.
Can the kill switch stop every agent on every endpoint today?
That is not what the announcement establishes: it describes gateway termination as available now and endpoint termination as forthcoming.