CrowdStrike is set to acquire identity security startup SGNL in a deal valued at $740 million, aiming to strengthen its cybersecurity capabilities against artificial intelligence-powered threats. The acquisition enhances CrowdStrike’s focus on identity protection as attackers increasingly exploit legitimate credentials rather than breaking into systems.
SGNL’s identity technology enables real-time access management for human, machine and AI identities across cloud and enterprise environments. This capability is expected to help organizations secure autonomous AI agents, which are increasingly being granted system access.
CrowdStrike entered the identity security market with its Preempt Security acquisition in 2020, and its identity business generated more than $435 million in annual recurring revenue as of the second quarter of fiscal 2026.
CEO George Kurtz said SGNL adds an identity fabric that aligns with evolving threat environments where adversaries abuse identities.
Founded in 2021, SGNL will bring its entire team to CrowdStrike, with no layoffs planned. The company said SGNL’s technology will integrate easily into the Falcon platform, benefiting existing customers. The deal is expected to close in the first quarter of fiscal 2027 and will be paid mainly in cash, with a portion in stock subject to vesting conditions.
CrowdStrike’s recent and notable acquisitions
In September 2025, CrowdStrike signed an agreement to buy AI security specialist Pangea, adding capabilities to secure the enterprise AI lifecycle and introducing what the company calls AI Detection and Response (AIDR). This expands the Falcon platform to protect AI data, models, agents and related infrastructure.
In August 2025, the company announced plans to acquire Onum, a real-time telemetry pipeline management and data processing startup. Onum’s technology will strengthen Falcon Next-Gen SIEM by streaming high-quality telemetry and enabling faster, autonomous threat detection within the platform.
CrowdStrike completed its acquisition of SecureCircle, a data protection and zero-trust security service that protects data on endpoints. The technology is being integrated into Falcon to provide Zero Trust enforcement at the data layer.
CrowdStrike acquired Flow Security to bring cloud data runtime protection and data security posture management (DSPM) into Falcon, enhancing cloud data security across environments.
RAJANI BABURAJAN
