---
title: CrowdStrike agrees to buy AI agent observability firm Fiddler and AI red-teaming startup Dreadnode, and adds an 'AI Kill Switch' that stops and blocks rogue agents | ctxsec
url: https://ctxsec.com/items/crowdstrike-acquires-fiddler-dreadnode-falcon-guardian-ai-kill-switch
description: "CrowdStrike announced definitive agreements to acquire Fiddler AI, which will become Falcon Observe (agent evaluation, tracing of reasoning and tool calls, drift detection, audit logs, token spend), and Dreadnode, whose platform runs 100+ known attack strategies such as jailbreaks, prompt injection and agent-specific attacks against models, agent loops, apps and MCP servers. Both are expected to close by the end of January 2027. Falcon Guardian also gains an AI Kill Switch that terminates unauthorized agents at its AI Gateway now, with endpoint enforcement coming later."
status: "official (CrowdStrike press releases, Nov 3). Deal values (about $400M and $95M) are from The Wall Street Journal as reported by SecurityWeek; CrowdStrike did not disclose terms"
published: 2026-11-03
---

> CrowdStrike announced definitive agreements to acquire Fiddler AI, which will become Falcon Observe (agent evaluation, tracing of reasoning and tool calls, drift detection, audit logs, token spend), and Dreadnode, whose platform runs 100+ known attack strategies such as jailbreaks, prompt injection and agent-specific attacks against models, agent loops, apps and MCP servers. Both are expected to close by the end of January 2027. Falcon Guardian also gains an AI Kill Switch that terminates unauthorized agents at its AI Gateway now, with endpoint enforcement coming later.

[← Industry News](/industry) · [markdown](/items/crowdstrike-acquires-fiddler-dreadnode-falcon-guardian-ai-kill-switch.md)

official (CrowdStrike press releases, Nov 3). Deal values (about $400M and $95M) are from The Wall Street Journal as reported by SecurityWeek; CrowdStrike did not disclose terms

2026-11-03

### CrowdStrike agrees to buy AI agent observability firm Fiddler and AI red-teaming startup Dreadnode, and adds an 'AI Kill Switch' that stops and blocks rogue agents

- **Guardian also lists:** agent-level hooks in Claude Code, OpenAI Codex, GitHub Copilot, Microsoft 365 Copilot, OpenCode and Cursor; discovery of malicious AI skills and MCP servers; and a Falcon sensor inside Anthropic's Claude Cowork VM.
- **Price:** SecurityWeek, citing the WSJ, reports roughly $400M for Fiddler and $95M for Dreadnode, mostly cash.

This is the latest in a run of AI-agent security acquisitions; the feature claims above are vendor statements, not independent evaluations.

Sources: [CrowdStrike: to acquire Fiddler for AI agent observability (Nov 3)](https://www.crowdstrike.com/en-us/press-releases/crowdstrike-to-acquire-fiddler-to-deliver-agent-observability/) · [CrowdStrike: to acquire Dreadnode for automated AI security testing (Nov 3)](https://www.crowdstrike.com/en-us/press-releases/crowdstrike-to-acquire-dreadnode-advance-ai-trust/) · [CrowdStrike: Delivers AI security and safety for the enterprise (AI Kill Switch, Nov 3)](https://www.crowdstrike.com/en-us/press-releases/crowdstrike-delivers-ai-security-safety-for-the-enterprise/) · [SecurityWeek: CrowdStrike reportedly paying $495 million for Fiddler, Dreadnode](https://www.securityweek.com/crowdstrike-reportedly-paying-495-million-for-ai-security-firms-fiddler-dreadnode/)