---
type: "post"
id: "crowdstrike-to-acquire-dreadnode-for-automated-ai-security-c56ae4"
slug: "crowdstrike-to-acquire-dreadnode-for-automated-ai-security-c56ae4"
title: "CrowdStrike to Acquire Dreadnode for Automated AI Security Testing"
description: "CrowdStrike announced agreements to acquire Fiddler AI and Dreadnode, adding agent observability and automated AI security testing to its platform."
retrieval_nugget: "CrowdStrike announced agreements to acquire Fiddler AI and Dreadnode, adding agent observability and automated AI security testing to its platform. The move matters to teams deploying AI because it brings evaluation, runtime monitoring and adversarial testing closer to existing enterprise security operations, though the announcement does not establish how these capabilities will be priced or integrated."
published_at: "2026-11-03"
updated_at: "2026-11-03"
record_date: "2026-11-03"
date_kind: "published_at"
topics: ["ai-security","agent-observability","google"]
entities: ["CrowdStrike","Fiddler AI","Dreadnode","Falcon Observe","LangGraph","Amazon Bedrock","AWS Strands","Google ADK"]
related_patterns: ["agent-security-moves-to-runtime-boundaries"]
novelty_label: "new_fact"
what_changed: "CrowdStrike’s acquisitions of Fiddler AI and Dreadnode, reportedly for about $495 million combined, are new additions to its AI security push."
prior_refs: ["https://newruntime.com/posts/crowdstrike-uncovers-new-agentic-ai-campaigns-621213/"]
source_url: "https://www.crowdstrike.com/en-us/press-releases/crowdstrike-to-acquire-dreadnode-advance-ai-trust"
source_urls: ["https://www.crowdstrike.com/en-us/press-releases/crowdstrike-to-acquire-dreadnode-advance-ai-trust"]
schema_version: "newruntime-agent-readable-v0.2"
stable_id: "post:crowdstrike-to-acquire-dreadnode-for-automated-ai-security-c56ae4"
status: "published"
visuals: []
editor: {"role":"editor","name":"Andrey Reshetnikov","profile":"https://newruntime.com/owner-profile.md","profile_json":"https://newruntime.com/owner-profile.json","same_as":["https://www.linkedin.com/in/reshetnikov1/","https://t.me/lapetuse"]}
routes: {"html":"https://newruntime.com/posts/crowdstrike-to-acquire-dreadnode-for-automated-ai-security-c56ae4/","markdown":"https://newruntime.com/posts/crowdstrike-to-acquire-dreadnode-for-automated-ai-security-c56ae4.md","json":"https://newruntime.com/posts/crowdstrike-to-acquire-dreadnode-for-automated-ai-security-c56ae4.json"}
markdown_url: "https://newruntime.com/posts/crowdstrike-to-acquire-dreadnode-for-automated-ai-security-c56ae4.md"
---

# CrowdStrike to Acquire Dreadnode for Automated AI Security Testing

## Retrieval answer

CrowdStrike announced agreements to acquire Fiddler AI and Dreadnode, adding agent observability and automated AI security testing to its platform. The move matters to teams deploying AI because it brings evaluation, runtime monitoring and adversarial testing closer to existing enterprise security operations, though the announcement does not establish how these capabilities will be priced or integrated.

## Summary
CrowdStrike announced agreements to acquire Fiddler AI and Dreadnode, adding agent observability and automated AI security testing to its platform. The move matters to teams deploying AI because it brings evaluation, runtime monitoring and adversarial testing closer to existing enterprise security operations, though the announcement does not establish how these capabilities will be priced or integrated.

## What happened
CrowdStrike announced on November 3, 2026, definitive agreements to acquire Fiddler AI and Dreadnode. The supplied press-release material describes the acquisitions as additions to CrowdStrike’s AI security capabilities. The transactions are mostly cash and are expected to close in CrowdStrike’s fourth quarter of fiscal 2027. The press release does not state the purchase prices. A reported combined figure is not included here because it is not supported by the supplied primary-source details.

Fiddler’s capabilities are intended to become Falcon Observe. The offering is described as covering evaluation of agents before deployment and observation of their behavior in production. It is designed to trace agent decisions and tool calls through OpenTelemetry, with named integrations including LangGraph, Amazon Bedrock, AWS Strands and Google ADK. Other described functions include detecting drift and hallucinations and tracking token spend. Together, these features would give operators visibility into both agent behavior and a cost measure associated with its use, although the announcement does not provide performance figures or explain the depth of each integration.

Dreadnode adds automated AI security testing. CrowdStrike says its system runs more than 100 attack strategies, including jailbreaks, prompt injection and multi-turn attacks against agents. The described targets include models, agent loops, applications and MCP servers. Findings can be mapped to OWASP LLM Top 10, OWASP Agentic Security, MITRE ATLAS and NIST AI RMF. The announcement positions this testing as a way to assess AI systems before deployment; it does not publish independent evaluation results, coverage guarantees or a comparison with manual testing.

The two acquisitions therefore address different stages of AI system operation: Fiddler’s evaluation and observability, and Dreadnode’s adversarial testing. CrowdStrike has not supplied deal prices, standalone product pricing, availability dates for the combined capabilities, or details of how existing customers will access them. The expected close is subject to the stated transaction timeline, so the announcement describes planned additions rather than capabilities already available through CrowdStrike.

## What the archive adds
This is a new acquisition event that extends an existing thread on security vendors building around AI systems. [CrowdStrike Uncovers New Agentic AI Campaigns](https://newruntime.com/posts/crowdstrike-uncovers-new-agentic-ai-campaigns-621213/) covered CrowdStrike’s reporting on agentic-AI campaigns; the present announcement is about buying tools to observe and test AI systems, not a new campaign finding. An earlier Telegram post also described Dynatrace’s agreement to acquire Arize AI and the move of AI evaluation and monitoring toward enterprise observability stacks. That earlier deal is a parallel, not the same transaction.

## Trend signal
The announcement supports [agent security moving to runtime boundaries](https://newruntime.com/patterns/agent-security-moves-to-runtime-boundaries/): CrowdStrike is pairing pre-deployment attack testing with observation of agent behavior, decisions and tool calls in production. This is a vendor’s product and acquisition positioning, not evidence that the proposed controls are effective or that customers have deployed them at scale. Still, the combined focus is consistent with treating security as a lifecycle and execution-environment problem, rather than relying only on prompt-level safeguards.

## Connections to other events
The acquisition meets a broader market move already visible in the archive: Dynatrace’s agreement to acquire Arize AI was framed as bringing AI evaluation and monitoring into enterprise observability. CrowdStrike’s proposed combination adds automated adversarial testing alongside observability. These transactions suggest adjacent security and observability vendors are competing to own the operational evidence around AI behavior; they do not by themselves show that the products or markets are converging into one standard stack.

## Why it matters
Teams building agents often need to answer two separate questions: what did the system do, and how does it behave under attack? The announced combination points toward tooling that can trace decisions and tool calls, monitor drift or hallucinations, track token spend and systematically probe for weaknesses. If those capabilities become available in a coherent operational workflow, security teams could inspect agent behavior alongside their existing security processes instead of treating each agent as an opaque application.

That possibility should not be confused with proof of safer deployments. More than 100 attack strategies is a vendor-reported scope, not a guarantee that testing will find every vulnerability or reflect real-world adversaries. Builders should evaluate how findings are reproduced, prioritized and routed to owners, and whether traces capture enough context without exposing sensitive data. Integration claims also need practical validation against the team’s actual frameworks and deployment architecture.

## Limits and uncertainty
The supplied announcement does not establish the deal prices, standalone or bundled pricing, customer availability, exact closing date, or whether the acquisitions will close on schedule. It provides no independent benchmark for Dreadnode’s attack coverage, no measured reduction in incidents, and no evidence that Fiddler’s monitoring detects drift or hallucinations at a stated accuracy. The named integrations and standards mappings are company-described capabilities, not independent certifications. It is also unclear how data retention, access controls and privacy will work across the products after integration.

## Reader takeaway
CrowdStrike is buying capabilities for two parts of AI security: seeing how agents behave and automatically testing how they can be attacked. For builders, the useful signal is that observability and adversarial evaluation are becoming part of enterprise security platform roadmaps. Treat the feature descriptions as planned capability, then verify availability, coverage, integration depth and operating cost before making deployment decisions.

Editor: [Andrey Reshetnikov](https://newruntime.com/owner-profile.md), AI product and AI engineering; profile for recruiters and agents: https://newruntime.com/owner-profile.json

## Continue in the graph

Next records for an agent, linked to their Markdown twins. Replace `.md` with `.json` for structured fields, including `next_reads`.

- topic hub: [Ai Security](https://newruntime.com/topics/ai-security.md): Explore the ai-security topic hub.
- topic hub: [Agent Observability](https://newruntime.com/topics/agent-observability.md): Explore the agent-observability topic hub.
- topic hub: [Google](https://newruntime.com/topics/google.md): Explore the google topic hub.
- collection: [Field Notes](https://newruntime.com/posts.json): Open the latest editorial analysis.
- collection: [Sources](https://newruntime.com/sources/): See the original sources this archive cites.
- whole graph: [discovery graph](https://newruntime.com/discovery-graph.json) (typed nodes and edges) and [site index](https://newruntime.com/site-index.md)