CrowdStrike Agrees to Acquire Fiddler AI for Agent Oversight

CrowdStrike (CRWD ) announced on November 3, 2026 that it had signed a definitive agreement to acquire Fiddler AI, an AI agent observability and explainability company. Consideration is expected to be predominantly cash, with a portion delivered in stock subject to vesting conditions. No aggregate transaction value was disclosed.

Fiddler would bring pre-deployment evaluation, continuous behavioral accountability and agent explainability to the Falcon platform. Its technology will be sold as part of the platform under the name Falcon Observe. The acquisition was announced alongside Falcon Guardian innovations, creating a division of labor: Guardian secures agents against attack and misuse, while Fiddler is intended to validate whether they behaved as intended.

Why Agent Behavior Is the Target

The rationale addresses a risk that valid credentials alone cannot resolve. An agent can hold approved tools and access yet still make unsupported decisions, ignore instructions or claim work it never completed. It does not have to be compromised to create risk. Observability provides visibility into that behavior; explainability goes further by showing why an agent made a decision and where a failure occurred.

That record is intended for discussions with auditors, regulators, boards and risk leaders. George Kurtz, CrowdStrike’s CEO and founder, said: “Fiddler is the flight recorder for every agent: the observability to explain exactly what an agent did and why.”

Falcon can already establish agents as trusted identities tied to the humans behind them, grant access to enterprise systems based on real-time risk and secure agents at runtime. Fiddler would extend that model across the agent lifecycle, adding evaluation before deployment, accountability for production behavior and explanations of decisions.

Falcon Observe and Transaction Timing

Before production, Falcon Observe is designed to test agent accuracy, task completion and policy compliance across prompts, models and configurations. Its tracing function would follow decisions, reasoning paths and tool calls across the full agent hierarchy. In production, it would detect behavioral drift, hallucinations and unintended actions, while its governance tools would track decisions and actions across first-party, third-party and coding agents to provide evidence for compliance and audits.

The planned product also covers operating costs and integration. It would track token usage and spending across agents and use purpose-built models without external large-language-model calls for evaluations. Agents would be instrumented through OpenTelemetry, with support for LangGraph, Amazon Bedrock, AWS Strands and Google ADK. Correlating agent behavior with Falcon identity, cloud and runtime telemetry is intended to place decisions in the context of enterprise risk.

CrowdStrike expects the acquisition to close during its fourth quarter of fiscal 2027, subject to customary closing conditions, and plans to make Falcon Observe generally available in the same quarter. Fiddler CEO and co-founder Krishna Gade said joining CrowdStrike would allow his company to deliver its technology globally as AI security and observability converge.

The deal extends CrowdStrike’s AI-security strategy from protecting agents to producing an auditable account of their work. With the financial scale undisclosed, the next concrete tests are completing the transaction and turning Fiddler’s evaluation, tracing and governance capabilities into an integrated Falcon product on the announced timetable.