CrowdStrike has signed a definitive agreement to acquire Fiddler AI, a Palo Alto company that builds observability tools for AI agents. The deal will bring Fiddler’s technology into the Falcon platform, where CrowdStrike plans to sell it as Falcon Observe.
The companies announced the agreement on November 3 at Fal.Con Europe 2026 in Barcelona. CrowdStrike did not disclose the purchase price for Fiddler.
What CrowdStrike is buying
Fiddler AI builds tools that test AI agents before deployment and track their behaviour once they are running in production. Its platform evaluates accuracy, task completion and policy compliance across prompts, models and configurations before an agent goes live.
After deployment, the same platform traces agent decisions, reasoning paths and tool calls across the full agent hierarchy. That trace shows why an agent acted as it did and where a failure occurred, rather than only showing that something went wrong.
The platform also watches for behavioural drift, hallucinations and unintended actions in production. It tracks token usage and spend across agents, and CrowdStrike says its purpose built models can cut evaluation costs by up to 98 percent by avoiding external model calls.
Why agent behaviour has become a boardroom question
CrowdStrike argues that agents create risk even when they are not compromised. An agent with valid credentials and approved tools can still make unsupported decisions, ignore instructions or claim work it never completed.
Fiddler is the flight recorder for every agent.
That line came from George Kurtz, chief executive and founder of CrowdStrike. He said that when a regulator or a board asks what an agent did, saying the model did it is not an answer.
The observability pitch lands at a moment when enterprises are being asked to prove that agents stayed within their assigned tasks. Fiddler’s tools are meant to supply that evidence for first party, third party and coding agents alike, in a form auditors can review.
What happens next
The acquisition is expected to close during CrowdStrike’s fourth quarter of fiscal 2027, subject to customary closing conditions. CrowdStrike said the price is contemplated to be paid predominantly in cash, with a portion delivered in stock subject to vesting conditions.
Fiddler will be sold as part of the Falcon platform as Falcon Observe, with general availability planned for the same quarter. The product will sit alongside Falcon Guardian, which secures agents at runtime, while Fiddler validates that they behaved as intended.
Joining CrowdStrike lets us deliver that on the world’s leading security platform on a global scale.
That was Krishna Gade, chief executive and co-founder of Fiddler. He said enterprises need to understand what their agents do, intervene when they go off course and explain why.
