CrowdStrike Doubles Down With Two Acquisitions, Zero Trust at the Core

As long as attackers can move laterally within your environment, they will not be hindered by your PAM. And the compliance checkboxes ticked in your IGA carry no weight if access decisions are based on outdated information.

These elements are part of SGNL’s pitch, which, through their platform, touts the “real-time” aspect of its access-management solution.

The positioning of this American company has captivated CrowdStrike, which is prepared to acquire it for more than $700 million. It intends to combine the technology with its Falcon platform, thereby extending its contextual authorization capabilities beyond Active Directory.

With Seraphic Security, CrowdStrike Takes a Step into the Browsers

CrowdStrike has just announced another acquisition attempt, valued at around $420 million. The target, based in Israel, is Seraphic Security. It markets browser protection technology—and Electron apps—built around an agent that sits atop the JavaScript engine.

Read also: A tailored security for AI infrastructures

Recently, Seraphic Security has emphasized the protection it says it provides against AI-related threats (data leaks, prompt injections, compliance violations…). More broadly, it positions itself as an alternative to numerous solutions: VDI, VPN, SWG (secure web gateways), RBI (remote browser isolation), etc. While presenting itself as a complement to EDRs, it offers visibility into browser activity.

Seraphic Security has already integrated with a few EDRs, including those from Microsoft … and CrowdStrike. The integrations with the Falcon platform also touch, among other things, on sandboxing and the zero trust assessment score.

2020-2025: Acquisitions Under the Banner of Zero Trust, Then Cloud Security

In 2025, CrowdStrike formalized two acquisitions.

One, valued at $290 M, targeted Onum, a telemetry specialist. Its stateless, in-memory architecture is designed to improve the reliability of data ingestion into Falcon and to kick off their analysis earlier, at the pipeline level.

The other deal, valued at $260 M, targeted Pangea. It is intended to extend CrowdStrike’s EDR capabilities into AI across the entire lifecycle.

Two acquisitions were also announced in 2024. They signaled a push to strengthen cloud security. On one hand, Flow Security ($200 M; data-security posture management). On the other, Adaptive Shield ($300 M; SaaS security-posture management).

The acquisition of Bionic, completed in 2023 for an estimated $350 M, reflected the same objective. With it, CrowdStrike broadened its AppSec capabilities and paved the way for a CIEM component, providing visibility into application execution across cloud infrastructures.

In 2022, external attack surface management was broadened with Reposify. In 2021, data security was in focus with SecureCircle. CrowdStrike framed the acquisition as a lever to extend its zero trust approach. It had adopted a similar stance in 2020 when it acquired Preempt Security (access management; $96 M). In the meantime, it had acquired Humio ($400 M) for its log ingestion/analysis technology.

Dawn Liphardt

Dawn Liphardt

I'm Dawn Liphardt, the founder and lead writer of this publication. With a background in philosophy and a deep interest in the social impact of technology, I started this platform to explore how innovation shapes — and sometimes disrupts — the world we live in. My work focuses on critical, human-centered storytelling at the frontier of artificial intelligence and emerging tech.