Skip to content
Rush Commerce
AI & Automation3 min read

CrowdStrike buys Fiddler for AI agent observability

CrowdStrike will acquire Fiddler AI to ship Falcon Observe, plus an AI Kill Switch for rogue agents. Small teams can log what their agents do today, for free.

CrowdStrike signed a definitive agreement to acquire Fiddler AI, a company that tracks and explains what AI agents do. The same day it launched an AI Kill Switch to stop agents that go off course, per The Next Web. AI agent observability is now a security product. The question for a small business is simple: if your agent did something wrong last Tuesday, could you show what and why?

What actually happened

Per CrowdStrike's November 3 release, announced at Fal.Con Europe in Barcelona:

  • Fiddler becomes Falcon Observe, sold on CrowdStrike's Falcon platform and due to be generally available in CrowdStrike's fourth quarter of fiscal 2027.
  • What it does: pre-deployment evaluation, traces of agent actions, explainability and audit records. Fiddler instruments agents through OpenTelemetry and supports LangGraph, Amazon Bedrock, AWS Strands and Google ADK.
  • Price: not disclosed. CrowdStrike says it will pay mostly in cash, with some stock that vests.

CEO George Kurtz called Fiddler "the flight recorder for every agent."

The Next Web reports two more moves the same day. CrowdStrike also agreed to buy Dreadnode, which attacks AI systems before deployment with jailbreaks and prompt injection. And the AI Kill Switch, in its Falcon Guardian product, is available now: an authorized admin can stop a running agent, block it from relaunching and cut its network access, with every action logged.

Why AI agent observability matters for your business

You do not need Falcon to start. The useful part of this news is the list of features a security company thinks agents need: a trace of every tool call, the reason for it, and a way to stop it. You can get most of that today. OpenTelemetry is free, and most agent frameworks can emit traces into it. If your agent issues refunds or edits orders, log each tool call with its inputs, output and the user it acted for.

Build the off switch before you need it. A kill switch is not exotic. It is a feature flag the agent checks before it acts, and an API key you can revoke in one click. Write down who can pull it.

Test it like an attacker would. CrowdStrike bought a company whose job is prompt injection. If your agent reads customer emails or web pages, try to make it misbehave before a customer does.

Key takeaways

  • CrowdStrike will acquire Fiddler AI; it becomes Falcon Observe, due in CrowdStrike's fiscal Q4 2027
  • Fiddler traces and explains agent actions over OpenTelemetry, with LangGraph, Bedrock, Strands and ADK support
  • No price disclosed; CrowdStrike also agreed to buy AI red-team firm Dreadnode
  • Falcon Guardian's AI Kill Switch can stop an agent and block relaunch, available now
  • Small teams can log tool calls and build a revocable off switch without enterprise tools

Can you replay what your agent did last week? We build agents with tool-call logs, approval limits and a one-click off switch from day one, on open standards you own. See how we build agents you can audit or tell us what your agent touches.

Sources: CrowdStrike, The Next Web.

  • #crowdstrike
  • #fiddler-ai
  • #ai-agent-observability
  • #ai-agents
  • #opentelemetry
TR

Tommy Rush — Founder, Rush Commerce

Operator turned builder. 15+ years running operations — now shipping the systems businesses run on. More

Get The Rush Report weekly — one email, zero fluff.