CrowdStrike to Acquire Pangea to Secure Enterprise AI Use and Development

Today, at Fal.Con 2025, I am delighted to announce CrowdStrike's intent to acquire AI security leader Pangea. With this acquisition, CrowdStrike will pioneer the category of AI detection and response (AIDR) as we secure enterprise AI development and use across the data, models, agents, identities, infrastructure, and interactions making up the AI lifecycle.

AI is rapidly becoming the cognitive layer of the enterprise, where it accelerates processes and drives innovation. Organizations around the world are embedding GenAI into their workflows and exploring new agents and applications. The benefits are transformative - but so are the risks. Employees input sensitive data into public models and experiment with AI tools outside IT's control. Enterprise agents make decisions without oversight. And outside the organization, adversaries move at machine speed to gain illicit access, steal information, and disrupt critical operations with the aid of AI.

CrowdStrike together with Pangea will deliver what no one else can: full-stack security to protect AI use and development across the enterprise. CrowdStrike protects the foundation: endpoints, cloud workloads, data, identities, and AI models. Pangea secures the interactions: prompts, responses, and agent communications.

CrowdStrike pioneered endpoint detection and response (EDR), now the security industry's standard for endpoint protection. Now, we're pioneering how businesses will secure AI. This acquisition will extend the CrowdStrike Falcon® platform with AI prompt layer security to deliver the industry's first complete AIDR solution, unifying visibility, compliance, and enforcement from enterprise AI development through workforce AI usage.

Only CrowdStrike and Pangea deliver the breadth and depth of capabilities required to secure AI where AI is built.

Defining AI Detection and Response

AIDR addresses two key areas of enterprise AI security.

AI Usage: As employees adopt GenAI tools, agents, and SaaS integrations, organizations face shadow AI, sensitive data leakage, and malicious or manipulated outputs. AIDR will provide complete visibility and governance across endpoints, browsers, cloud, and SaaS, enforcing policies and stopping unsafe interactions before they create risk.

AI Development: Enterprises are embedding AI into their own applications, agents, and infrastructure, expanding the attack surface from training data to runtime. AIDR will safeguard the full lifecycle of these systems with built-in controls for data protection, access management, and guardrails that prevent prompt injection, agent misuse, and unauthorized tool calls.

The Falcon platform already provides the foundation to secure AI. It protects the models and environments supporting AI processes, detects and stops sensitive data exfiltration from endpoints and cloud workloads, secures the identities behind AI agents, and enforces policies across endpoints and the SaaS stack. Businesses around the world trust the Falcon platform to fuel secure AI innovation.

With Pangea, CrowdStrike will extend this protection into the interaction layer of AI to secure how AI is used across the enterprise. Pangea inspects prompts, responses, and agent activity to catch sensitive data or malicious instructions before they create risk. Its governance policies allow organizations to block public models while enabling safe internal use. Development guardrails stop malicious prompts, prevent risky tool calls, and protect secrets and sensitive data. Businesses gain full visibility into who is using AI, what data is being shared, and the control to instantly stop unsafe interactions.

CrowdStrike, with Pangea, will deliver competitive advantages in securing AI across four core areas:

• Defense against prompt injection: Protect against direct and indirect prompt injection attacks, model jailbreak attempts, and malicious entities, with up to 99% efficacy at sub-30ms latency.

• Visibility into risky AI use: Enable control over the topics and conversations users have with chatbots and generative AI, and provide deep visibility into AI traffic, activity, and governance policies to stop risky AI use.

• Security for AI in Development and Production: Allow developers to create AI applications and agents with security built in, while security teams can monitor and govern enterprise-built and integrated AI.

• Fast, secure innovation: Help organizations bring AI features to market faster without sacrificing control, with ready-to-use safeguards.

AI doesn't live in the network, it lives where models are built in the cloud and datacenter, where adoption happens on endpoints, and where access occurs through human and nonhuman identities. Its operations span prompts, models, agents, and data pipelines. As AI continues to proliferate across businesses, AIDR is required to unify visibility, governance, and response across AI use and development.

Together, CrowdStrike and Pangea will define AIDR with a unified security model for AI that delivers governance, control, and security across the AI lifecycle.

Securing AI Where It Happens

Organizations around the world are racing to adopt AI - but the speed of adoption is outpacing their ability to secure it. As AI transforms the enterprise and the threat landscape, they need a new foundation to gain the visibility, detection, governance, and response required to protect AI development and usage.

CrowdStrike anticipated this shift, knowing businesses need new technologies to detect and respond to threats when the attack surface expands. We saw this in EDR for endpoints, CDR for cloud, and ITDR for identity. Now, we're seeing the attack surface expand further with AI. Just as they adopted the earlier technologies, organizations need AIDR to detect and stop threats at the AI layer.

The Falcon platform already provides the foundation for secure AI. Together with Pangea we will extend our platform leadership to the critical interaction layer, where AI is built and used across the enterprise, to achieve complete protection across the AI lifecycle. After Pangea's AI-native capabilities are integrated into the Falcon platform, we will deliver the industry's first complete AIDR solution and fully unified approach to securing AI.

Forward-Looking Statements
This blog contains forward-looking statements, including statements regarding the closing and benefits of the proposed acquisition. These statements involve risks and uncertainties, and actual results may differ materially. There are a number of risks which could cause actual results to differ materially, including the satisfaction of the acquisition's closing conditions, our ability to integrate Pangea, and other risks described in the filings we make with the Securities and Exchange Commission from time to time.