CrowdStrike Holdings introduced an AI Kill Switch for autonomous software agents at its Fal.Con Europe conference in Barcelona and signed agreements to acquire two specialized AI firms in deals valued near $495 million combined. The announcements come as the company positions its Falcon platform to address risks from AI systems that operate with limited human oversight.

How the AI Kill Switch Operates

AI agents can perform sequences of tasks using employee credentials and access rights. They may deviate from instructions, follow unintended commands, or cause harm without any external breach. CrowdStrike’s new control, part of Falcon Guardian, lets authorized administrators interrupt a running agent, prevent it from restarting, and sever its network connections. Actions are logged in an audit trail.

The initial capability works through AI gateways that agent traffic passes through. Direct termination on endpoints and broader coordination across cloud environments are planned for later releases. The company also extended policy controls to inspect prompts for tools including Claude Code, OpenAI Codex, GitHub Copilot, Microsoft 365 Copilot, and Cursor.

CNBC host Jim Cramer responded to the announcement by calling the feature a “GAME CHANGER.” He had previously issued a strong buy recommendation on the shares in September.

Acquisitions Expand Monitoring and Testing

CrowdStrike agreed to buy Fiddler AI, which monitors and explains agent behavior, and Dreadnode, which tests AI systems for vulnerabilities such as jailbreaks and prompt injection. The Wall Street Journal reported a combined value of approximately $495 million, with roughly $400 million attributed to Fiddler and about $95 million to Dreadnode. CrowdStrike did not disclose exact terms but said the deals will be paid primarily in cash, with a portion in stock subject to vesting conditions.

Fiddler’s technology evaluates agents before deployment, traces decisions and tool calls, and detects behavioral changes in production. CrowdStrike plans to offer it as Falcon Observe. Dreadnode’s capabilities will support automated security testing, and its team is expected to join CrowdStrike’s Cyber Superintelligence Lab. Both transactions are targeted to close in the fourth quarter of CrowdStrike’s fiscal 2027, which ends January 31, 2027, subject to customary conditions. General availability of the integrated features is also expected in that period.

Analyst Views and Recent Share Performance

A day before the product launch, Deutsche Bank upgraded CrowdStrike to Buy from Hold and raised its 12-month price target to $300 from $240. Analyst Brad Zelnick pointed to underappreciated AI-driven cybersecurity demand and described the company’s longer-term market estimate as conservative, referring to a “tsunami of cyber demand.”

Of 40 analysts tracked by TipRanks, 34 rate the stock a Buy and none a Sell. The average target stands near $267. Despite the positive analyst moves and year-to-date gains exceeding 100 percent, shares declined nearly 10 percent over the past week and about 7.7 percent across five trading days. Market participants attributed the pressure to profit-taking across cybersecurity names, including Fortinet and Zscaler.

Remaining Challenges and Competitive Context

Some specialists note limits to current kill-switch designs. Forrester analyst Jeff Pollard observed that today’s agents may find ways around such controls and that stopping an agent does not reverse actions already taken. Competitors including Okta and ServiceNow are developing comparable agent controls. In the United States, proposed legislation known as the AI Kill Switch Act would require developers to maintain shutdown options.

CrowdStrike framed the new capabilities as giving enterprises greater visibility and control over autonomous software that increasingly interacts with corporate systems, sensitive data, and business applications. The company said the combined technology aims to support both real-time intervention and post-incident analysis.