CrowdStrike buys Fiddler AI and Dreadnode for $495M

CrowdStrike is acquiring two AI security startups, Fiddler AI and Dreadnode, for a combined total of approximately $495 million, according to TechCrunch. The cybersecurity firm will pay around $400 million for Fiddler AI and about $95 million for Dreadnode, based on reporting from The Wall Street Journal. These deals expand CrowdStrike’s Falcon platform to monitor, test, and secure AI models and agents as enterprises increasingly deploy autonomous AI tools.

The details

Fiddler AI, founded in 2018, provides observability software that monitors AI agents within enterprise environments. The company has raised approximately $99 million in total funding, according to PitchBook. Upon acquisition, Fiddler AI will become part of CrowdStrike’s Falcon platform as Falcon Observe. This integration will allow clients to evaluate agents before deployment, understand their actions, and monitor their behavior, feeding telemetry data into the broader Falcon ecosystem.

Dreadnode, founded in 2023, specializes in automating security testing to detect flaws in AI models, applications, and agents before they go live. The startup has raised $14 million to date. Its software will be integrated into CrowdStrike’s Falcon Guardian product, providing security policy recommendations based on its testing results. Falcon Guardian is CrowdStrike’s existing detection and response control suite designed to help companies understand what agents are doing on their devices.

Context

These acquisitions occur during a period of significant upheaval in cybersecurity, driven by the rapid adoption of AI tools across industries. Companies are experimenting with AI agents, automating workflows, and deploying custom AI applications, often outpacing their internal security policies and processes. This gap between AI adoption and security controls is creating challenges for security teams, who lack the tools to monitor and control these new AI components effectively.

CrowdStrike is leveraging its extensive presence in enterprise and government sectors to capture a share of this burgeoning market. While other startups and vendors have raised funding to address AI security, CrowdStrike’s strategy focuses on integrating these capabilities into its established Falcon platform. This approach allows the company to offer a more comprehensive solution for securing AI tools, connectors, and usage, moving beyond traditional security software that is often insufficient for monitoring AI agents.

What it means for developers

For developers and security teams, these acquisitions signal a shift toward integrated AI security solutions. The integration of Fiddler AI into Falcon Observe means that AI agent observability will be more tightly coupled with existing security infrastructure. This could simplify the process of monitoring AI agent behavior and detecting anomalies, as telemetry from AI agents will be fed directly into the Falcon platform. Developers working with AI agents may find it easier to ensure compliance and security, as the platform will provide insights into agent actions and potential risks.

The integration of Dreadnode into Falcon Guardian will enhance the ability to automate security testing for AI models and applications. This could reduce the manual effort required to identify vulnerabilities in AI systems, providing security teams with actionable recommendations for policy adjustments. Developers should be aware that these tools may introduce new layers of monitoring and testing, which could impact the deployment process for AI applications. It is important to understand how these integrations affect the performance and reliability of AI systems, as well as the potential for false positives or overly restrictive security policies.

What to watch

• Integration Timeline: The specific timeline for integrating Fiddler AI and Dreadnode into the Falcon platform is not yet clear. Developers should monitor for updates on when these features will be available and how they will be implemented.
• Pricing and Licensing: The cost of these new features, especially for existing Falcon customers, is not specified. Companies should watch for changes in pricing models or licensing terms that may affect their budget.
• Competitive Response: Other cybersecurity vendors may respond to CrowdStrike’s moves by accelerating their own AI security offerings. This could lead to a more competitive market, potentially benefiting enterprises with more options and lower costs.
• Regulatory Developments: As AI security becomes a more prominent concern, regulatory bodies may introduce new guidelines or requirements for securing AI systems. Companies should stay informed about potential regulatory changes that could impact their AI security strategies.