AI Coding Live News

CrowdStrike Agrees to Acquire Fiddler and Dreadnode and Ships an AI Kill Switch, Bringing Agent Observability, Pre-Deployment AI Security Testing and Agent Termination Into Falcon

At Fal.Con Europe in Barcelona on November 3, CrowdStrike said it signed definitive agreements to acquire AI agent observability company Fiddler AI and automated AI security testing company Dreadnode, and launched an AI Kill Switch in Falcon Guardian that can terminate a misbehaving agent, block it from relaunching and cut its enterprise network access. Both deals are expected to close in CrowdStrike's fiscal Q4 FY27, with the products generally available that quarter. CrowdStrike did not disclose prices; CyberScoop, citing the Wall Street Journal, put Fiddler at about $400 million and Dreadnode at about $95 million.

CrowdStrike Agrees to Acquire Fiddler and Dreadnode and Ships an AI Kill Switch, Bringing Agent Observability, Pre-Deployment AI Security Testing and Agent Termination Into Falcon

Key Takeaways

  • Both acquisitions were announced the same day and are expected to close in CrowdStrike's fiscal Q4 FY27, paid mostly in cash plus some stock subject to vesting conditions.
  • CyberScoop, citing the Wall Street Journal, puts Fiddler at about $400 million and Dreadnode at about $95 million, roughly $495 million combined; CrowdStrike did not disclose the amounts.
  • Fiddler will be sold as Falcon Observe: pre-deployment evaluation, tracing of decisions and tool calls across the agent hierarchy, drift and hallucination detection, and evaluation costs cut by up to 98% using purpose-built models.
  • Dreadnode runs more than 100 known AI attack strategies (jailbreaks, prompt injection, multi-turn and agent-specific attacks) against models, agent reasoning loops, applications and MCP servers, mapping findings to OWASP LLM Top 10, OWASP Agentic ASI01-ASI10, MITRE ATLAS and NIST AI RMF.
  • The AI Kill Switch is available today: an authorized admin triggers it, the agent is stopped first at the Gateway (endpoint enforcement coming soon), blocked from relaunching and cut off from the network, with every action logged.
Read full story

Arize Phoenix Adds Read-Only SQL and Sandboxed Code Mode to MCP Server for Agent Observability

Arize updated the Phoenix MCP server with read-only SQL and sandboxed code execution, allowing coding agents to aggregate and diagnose thousands of traces in a single turn instead of multi-step retrieval loops.

Key Takeaways

  • Pushes computation to the database layer via SQL rather than dumping thousands of raw spans into agent context;
  • Reduces multi-step telemetry analysis from dozens of conversational turns into a single sandboxed execution;
  • Enforces bounded read-only primitives to protect production observability pipelines from unauthorized writes.
Read full story
Linked Models & Agents: