CrowdStrike Holdings, Inc.
Acquisitions
6
Major Deals Covered
$1.1B
Disclosed Deal Value
CrowdStrike's largest disclosed acquisition here is SGNL for $740M in 2026. This page covers 6 major deals from 2021 to 2026, each with its price where disclosed and the reason behind it.
| Company | Year | Price | Purpose |
|---|---|---|---|
| Humio (Falcon LogScale) | 2021 | $400.0M | Added scalable, index-free log management to support Next-Gen SIEM and observability use cases. |
| Bionic | 2023 | Undisclosed | Added application security posture management (ASPM) to Falcon Cloud Security. |
| Flow Security | 2024 | Undisclosed | Added data security posture management (DSPM) for cloud and runtime data flows. |
| Pangea | 2025 | Undisclosed | Added AI detection and response to secure enterprise AI applications, models, and agents. |
| SGNL | 2026 | $740.0M | Added continuous, real-time authorization that grants and revokes access for human and AI identities based on current risk. |
| Seraphic Security | 2026 | Undisclosed | Added browser runtime security, turning standard browsers into secure enterprise browsers. |
2026
$740M
Added continuous, real-time authorization that grants and revokes access for human and AI identities based on current risk.
Extends Falcon Identity Protection beyond threat detection into dynamic privilege control.
Announced January 8, 2026 and expected to close in Q1 fiscal 2027.
2026
Added browser runtime security, turning standard browsers into secure enterprise browsers.
Brings protection to the browser, where much enterprise work and AI tool usage now happens.
Announced January 13, 2026; price not disclosed.
2025
Added AI detection and response to secure enterprise AI applications, models, and agents.
Supports CrowdStrike's push into securing AI adoption.
Being built into Falcon AI security offerings.
2024
Added data security posture management (DSPM) for cloud and runtime data flows.
Gave Falcon data discovery and data protection capabilities.
Integrated into Falcon Cloud Security and data protection offerings.
2023
Added application security posture management (ASPM) to Falcon Cloud Security.
Extended cloud security from infrastructure to application-level risk.
Integrated into Falcon Cloud Security.
2021
$400M
Added scalable, index-free log management to support Next-Gen SIEM and observability use cases.
Became Falcon LogScale, the data foundation for Falcon Next-Gen SIEM.
Next-Gen SIEM is one of CrowdStrike's main growth areas against legacy SIEM vendors.
CrowdStrike's growth strategy is to become the consolidation platform for the security operations center. Beyond endpoint protection, it is pushing Next-Gen SIEM, cloud security, identity protection, exposure management, and Charlotte AI agentic security workflows. It uses Falcon Flex to lower friction for adding modules, and tuck-in acquisitions to enter new categories: Onum and Pangea in 2025, then SGNL ($740 million) and Seraphic in January 2026. It also sells to small businesses and MSSPs through partners and marketplaces.
CrowdStrike makes money mainly from subscriptions to its Falcon platform, which accounts for roughly 95% of revenue; the rest comes from professional services such as incident response. Customers deploy one sensor and pay per protected endpoint, workload, or identity, then add modules (EDR/XDR, identity protection, cloud security, Next-Gen SIEM, exposure management, Charlotte AI) without installing new software. Falcon Flex lets customers pre-commit spend and switch modules on as needed. Ending ARR from Flex accounts passed $2.29 billion in July 2026, up 101% year over year. Sales run through a direct field team, channel partners, MSSPs, and cloud marketplaces such as AWS Marketplace.
In March 2021, CrowdStrike acquired Humio, a pioneer in high-speed, index-free log management, for approximately $400 million. Integrated as Falcon LogScale, the acquisition gave CrowdStrike the technology to ingest and search petabytes of enterprise telemetry in sub-seconds, disrupting the legacy SIEM market.
In September 2020, CrowdStrike acquired Preempt Security for $96 million. The acquisition provided the real-time identity threat detection and Active Directory protection technology that powers Falcon Identity Protection, one of CrowdStrike's fastest-growing modules.
In September 2023, CrowdStrike acquired Bionic.ai for approximately $350 million. Bionic is the market leader in Application Security Posture Management (ASPM), allowing CrowdStrike to deliver comprehensive visibility into cloud application architectures, code vulnerabilities, and runtime data flows.
In September 2022, CrowdStrike acquired Reposify, an External Attack Surface Management (EASM) platform that scans the entire public internet to discover and secure exposed corporate assets, servers, and shadow IT vulnerabilities before hackers can exploit them.
In March 2024, CrowdStrike acquired Flow Security, the industry's first cloud data runtime security platform, expanding the Falcon platform into Data Security Posture Management (DSPM) to discover, classify, and protect sensitive data in motion and at rest across cloud and on-prem environments.
CrowdStrike acquires innovative technology startups that solve critical security blind spots (identity, cloud application security, log scale, data security) whose code can be cleanly integrated into Falcon's single-agent, single-console architecture without creating bloat.
In 2017, CrowdStrike acquired Payload Security (creators of the automated malware sandbox technology 'Hybrid Analysis'), integrating advanced multi-engine behavioral sandbox analysis directly into Falcon Sandbox and Falcon Intelligence.
Unlike competitors who bolt together acquired software with separate agents and consoles, CrowdStrike strictly refactors all acquired technology into Falcon's native cloud microservices and single lightweight sensor, maintaining a pristine user experience.
To aggressively expand beyond just laptops and servers, CrowdStrike acquired Humio (massive log management) for $400 million in 2021, and Bionic in 2023 to secure complex cloud applications before they are even deployed.
Compare corporate acquisition records, deal values, and strategic targets
Explore CrowdStrike
Core profile pages, founders and related research hubs for this company.