The Pulse
CrowdStrike to Acquire Fiddler for AI Agent Observability
Falcon Observe is designed to evaluate AI agents before deployment and trace their behavior in production. CrowdStrike says Fiddler’s tools will connect agent activity with Falcon identity, cloud and runtime telemetry.
AI.info Team · Written with AI · fact-checked ·
Falcon Observe puts agent behavior on record
“Every company is deploying agents and asking the same thing: what are agents actually doing?”
George Kurtz, CEO and founder of CrowdStrike
On November 3, 2026, CrowdStrike announced it had signed a definitive agreement to acquire Fiddler AI, which it describes as a leader in AI agent observability and explainability. The company plans to fold Fiddler into its Falcon platform as Falcon Observe, with general availability in Q4 FY27.
Approved access can still produce a bad decision
CrowdStrike says an AI agent can hold valid credentials and use approved tools yet still make unsupported decisions, ignore instructions or claim work it never completed. The company says those failures do not require an agent to be compromised. Its announcement describes observability as a way to see agent behavior, while explainability helps show why an agent made a decision and where things went wrong.
A CrowdStrike blog post illustrates the risk with an agent processing a customer refund: using approved tools and valid credentials, it approves a refund that violates company policy. The example shows the distinction the company draws between seeing legitimate activity and understanding the reasoning behind an agent’s action.
Evaluation before launch, tracing after
Before deployment, teams will be able to compare prompts, models and configurations to assess whether agents complete intended tasks safely and accurately. After deployment, Fiddler will trace decisions, reasoning paths and tool calls across an agent hierarchy, according to CrowdStrike. The company says this can help teams identify behavioral drift, hallucinations and unintended actions in production.
CrowdStrike says Fiddler will cover first-party, third-party and coding agents, providing records intended to support compliance and audits. It also lists support for OpenTelemetry, LangGraph, Amazon Bedrock, AWS Strands and Google ADK. The announcement says the product can track token usage and spend and reduce evaluation costs by up to 98% using purpose-built models without external LLM calls.
Agent traces meet Falcon security telemetry
Within Falcon, Fiddler is intended to connect agent intent and behavior with security telemetry across identity, cloud and runtime environments. CrowdStrike says that context will help security teams understand why an agent acted and what happened across the enterprise afterward. The plan joins Falcon Guardian, which the company says protects agents from attacks and misuse, with Falcon Observe, which evaluates and explains whether they behave as intended.
Cash-led payment, with closing conditions
CrowdStrike says the purchase price is contemplated to be paid predominantly in cash, with a portion delivered as stock subject to vesting conditions. The company expects the proposed acquisition to close during its fourth quarter of FY27, subject to customary closing conditions. CrowdStrike’s announcement also cautions that closing and integration carry risks and that actual results may differ materially from its forward-looking statements.