CrowdStrike , a company at the forefront of cybersecurity technologies, has signed a definitive agreement to acquire Dreadnode, an organization that is at the forefront of providing automated AI-based security testing and evaluation.
The acquisition deal, which was announced at Fal.Con Europe 2026, involves the integration of automated red teaming and vulnerability testing within the CrowdStrike Falcon® platform. Through continuous testing of machine learning models, applications, and autonomous agents prior to implementation, CrowdStrike provides companies with control to identify any weaknesses in the system.
Addressing the Blind Spots in Architectural Application Security of Conventional Approaches
There is nothing more disruptive than the explosion in agentic workflows and large language models to conventional approaches towards software testing. Conventional techniques for cyber testing were devised for the deterministic nature of static code paths that behaved uniformly in identical conditions. In today’s world of AI and autonomous systems, the inherent probabilities and dynamism in such systems make them susceptible to new adversarial threats like prompt injection, jailbreaks, and loop reasoning attacks.
Also Read: CrowdStrike Expands Deloitte Partnership Across Cybersecurity Advisory and Operations
Due to the presence of such threats in underlying model weightage and semantic reasoning flows, conventional application security tools often miss out on them. The stakes are huge when organizations are looking to deploy such agents in their business processes.
The planned acquisition expands CrowdStrike’s presence into early development and pre-production testing stages, reinforcing its position within the AI Detection and Response (AIDR) category. The combined solution is slated to achieve general availability within the fourth quarter of CrowdStrike’s fiscal year 2027.
Key technical capabilities delivered by Dreadnode across the Falcon platform include:
Red Team Automation at Scale: Enables operators to scope out evaluations with natural language prompts. The engine automatically generates tests for more than 100 well-known attack vectors, including sophisticated multi-step exploitation, jailbreak, prompt injection, and targeted attacks on individual agents.
Regulatory and Threat Standardization Mapping: Categorizes findings based on their impact and maps them to key regulatory frameworks, including the OWASP Top 10 for LLMs, the OWASP Agentic Security initiative (ASI01 – ASI10), MITRE ATLAS, and the NIST AI Risk Management Framework (AI RMF), to document audit information necessary for making go/no-go decisions regarding production use.
Repository Scanning: Evaluates AI weights, model registries, code repositories, and dependencies before release.
Operator Governance in Human-in-the-Loop Mode: Empowers security analysts to manually update the classification of findings, change severity levels, and add their own reasoning, ensuring instant synchronization of risk scores across enterprise-level dashboards.
Two-Way Integration with Falcon Guardian and SafeMind: Transforms testing results into actionable policies on the Falcon Guardian side for hardening runtimes and uses testing metrics to train CrowdStrike SafeMind security models.
Unfiltered Industry Statements and Executive Commentary
“Enterprises are deploying AI faster than they can prove it is secure. A model can be jailbroken, an agent can be manipulated, and most organizations have no way to find those flaws until the AI is already in production,” said George Kurtz, CEO and founder of CrowdStrike. “With Dreadnode, CrowdStrike will give every enterprise the power to trust AI and deploy faster, with confidence.”
“AI fails in ways traditional testing was never designed to catch, and the people best equipped to find those failures think like attackers. We founded Dreadnode to expose those weaknesses before AI reaches production,” said Brad Palm, CEO of Dreadnode. “As part of CrowdStrike, we will bring Automated AI Security Testing to every enterprise, helping teams confidently find and fix weaknesses.”
Expanding CrowdStrike’s Cyber Superintelligence Lab
Following the close of the transaction, the Dreadnode engineering and research organization will merge into CrowdStrike’s Cyber Superintelligence Lab. The integration adds dedicated adversarial AI talent to CrowdStrike’s research teams while leveraging Dreadnode’s testing frameworks to evaluate frontier model resilience, accelerating research into secure enterprise agent architectures.
The transaction consideration is structured primarily in cash, alongside equity subject to vesting provisions. The acquisition is projected to close during CrowdStrike’s fourth quarter of fiscal 2027, subject to customary regulatory reviews and closing conditions.