Analysis
CrowdStrike agrees to buy Fiddler AI and Dreadnode to monitor and test AI agents, and launches an AI Kill Switch, with prices reported but not confirmed
CrowdStrike signed deals for Fiddler AI and Dreadnode and launched an AI Kill Switch. Prices come from the WSJ via relays, not confirmed by the company.
On November 3, 2026, at its Fal.Con Europe conference in Barcelona, CrowdStrike announced agreements to buy two AI security startups, Fiddler AI and Dreadnode, and launched an AI Kill Switch in Falcon Guardian. The acquisitions are signed deals, not completed ones.
The essentials
- The deals: signed, not closed. Closing is expected in the fourth quarter of CrowdStrike's fiscal 2027, under the usual conditions.
- The prices: not published by CrowdStrike. The Wall Street Journal, relayed by CyberScoop and Yahoo Finance, reports about $400 million for Fiddler AI and about $95 million for Dreadnode. Unconfirmed.
- The Kill Switch: available now in Falcon Guardian, at the gateway level. Stopping agents directly on the endpoint is announced as coming soon.
- Not established: official prices, the real value of the deals, the Kill Switch's effectiveness.
Related reading: Foxconn on robots and AI agent safety and Walmart's gateway for shopping agents.
What is CrowdStrike buying?
Fiddler AI makes observability and explainability tools for AI agents, to be sold as Falcon Observe on the Falcon platform. It is meant to evaluate agents before production, trace their decisions, tool use and behavior, detect unintended actions and keep audit logs (Yahoo Finance, CyberScoop, The Next Web). CyberScoop says it works with LangGraph, Amazon Bedrock and Google ADK. CrowdStrike CEO George Kurtz described it as an airplane black box for every agent (CyberScoop, paraphrased).
Dreadnode runs automated security tests on AI models, applications and agents before deployment, with more than 100 known attack strategies, including prompt injection and jailbreaks. Results are ranked by severity and tied to the OWASP Top 10 for LLMs and the NIST AI RMF (CyberScoop). The findings will feed Falcon Guardian as policy recommendations (The Next Web).
Source: CyberScoop, The Next Web, Yahoo Finance.
What does the AI Kill Switch do?
According to The Next Web and Yahoo Finance, an authorized administrator can stop an agent that goes outside its instructions where it runs, prevent it from restarting and cut its access to the company network. Every action is logged. The sensor stops agents at the gateway level first; stopping directly on the endpoint is announced as coming soon, so it is not available yet.
According to CyberScoop, Kurtz says on X that the mechanism lives outside the model, at runtime, so an agent can neither bypass it nor wait it out. That is CrowdStrike's claim, and we did not test it. Kurtz also frames the move as going from security to safety: being able to stop agents makes it possible to deploy more of them, and regulators and boards will not accept "the model did it" as an explanation (CyberScoop, paraphrased). Related: CrowdStrike is integrating Falcon Guardian with Anthropic's Claude Cowork, in beta on macOS (The Next Web).
How much and when?
CrowdStrike has not published the amounts. The Wall Street Journal, relayed by CyberScoop and Yahoo Finance, mentions about $400 million for Fiddler AI and about $95 million for Dreadnode, about $495 million in total (the relays' calculation). The company has not confirmed these figures. Payment is mostly in cash, with some stock subject to vesting conditions (CyberScoop, The Next Web).
The products are expected to be generally available in the same quarter as the closing (Yahoo Finance, The Next Web). Constellation Research's Larry Dignan reads the deals as a sign that security vendors are rushing to secure AI agents; that is the author's analysis.
What is not established?
Source: CyberScoop, The Next Web, Yahoo Finance.
Official prices, the real value of the deals, and whether the acquisitions will close. The exact availability dates of Falcon Observe and of the Dreadnode product, beyond "fourth quarter of fiscal 2027". The Kill Switch's effectiveness: no independent test, no figure. Endpoint coverage and which third-party agents are supported. We tested nothing.
Comparison table
| Point | What the sources say | Source |
|---|---|---|
| Deals | Signed on November 3, 2026; closing expected in the fourth quarter of fiscal 2027 | CyberScoop, The Next Web |
| Prices | About $400 million and about $95 million, per the Wall Street Journal; unconfirmed | CyberScoop, Yahoo Finance |
| Fiddler AI | Agent observability, to be sold as Falcon Observe | CyberScoop, The Next Web |
| Dreadnode | Pre-deployment attack testing, 100+ known strategies | CyberScoop |
| AI Kill Switch | Available at the gateway; endpoint "coming soon"; untested | The Next Web, Yahoo Finance |
Frequently asked questions
Are the acquisitions complete?
No. They are signed agreements, with closing expected in the fourth quarter of CrowdStrike's fiscal 2027.
How much do they cost?
CrowdStrike has not said. The Wall Street Journal, via relays, reports about $400 million and about $95 million. Unconfirmed.
Is the AI Kill Switch available?
Yes, at the gateway level. Stopping directly on the endpoint is coming soon. We found no independent test.
Method and limits
We read CyberScoop, The Next Web, Yahoo Finance and Constellation Research through automatic summaries, not in full, and not CrowdStrike's press release. The prices come from one source, the Wall Street Journal, relayed by CyberScoop and by Yahoo Finance (through StockTwits). Effectiveness claims are the company's and unverified. We tested nothing. This is not investment advice.
Sources
- CyberScoop, read via an automatic summary
- The Next Web, read via an automatic summary
- Yahoo Finance, relays the Wall Street Journal via StockTwits, read via an automatic summary
- Constellation Research, read via an automatic summary
Spotted an error in this article? Report it · Our corrections policy