The acquisition is expected to close in the first quarter of CrowdStrike’s fiscal 2027. Once completed, SGNL’s technology will be integrated into CrowdStrike’s flagship Falcon platform, enhancing customers’ ability to manage both human and AI identity access requests while monitoring real-time risk.
The acquisition is expected to close in the first quarter of CrowdStrike’s fiscal 2027. Once completed, SGNL’s technology will be integrated into CrowdStrike’s flagship Falcon platform, enhancing customers’ ability to manage both human and AI identity access requests while monitoring real-time risk.
CEO George Kurtz said the deal significantly strengthens CrowdStrike’s position in the rapidly growing identity security market, which the company estimates reached $435 million by the end of its second fiscal quarter and represents one of today’s most exploited attack surfaces.
“This is a massive opportunity for our customers to better protect themselves — and for us to disrupt the identity market,” Kurtz said, noting that identity-based attacks have become more sophisticated as artificial intelligence lowers barriers for attackers.
The acquisition comes as enterprises reassess identity controls in response to increasingly automated threats. High-profile incidents over the past year — including attacks targeting Microsoft’s SharePoint ecosystem and disclosures of AI-assisted attacks — have highlighted how compromised credentials remain a primary vector for breaches.
Founded in 2021 and headquartered in Palo Alto, California, SGNL raised $30 million in early funding in February. Its investors include Cisco Investments and Microsoft’s venture fund. Co-founders Scott Kriz and Erik Gustavson previously built a startup acquired by Google in 2017 and later spent several years at the search giant.
The deal also reflects a broader consolidation trend across cybersecurity. Providers are racing to assemble end-to-end platforms as customers look to reduce tool sprawl and defend against AI-enabled threats. Recent large transactions include Palo Alto Networks’ $25 billion acquisition of CyberArk and Google’s $32 billion purchase of cloud security startup Wiz.
CrowdStrike itself has been an active acquirer, announcing deals in 2025 for AI agentic security platform Pangea and Spanish data startup Onum. Kurtz said the company’s strategy is focused on acquiring strong teams and modern technology rather than layering on legacy tools.
“Our goal is consolidation with better outcomes,” Kurtz said. “Fewer vendors, less complexity, lower cost — and stronger breach prevention.”
Sara Montes de Oca is the Editor in Chief of TechEchelon. Previously a correspondent and producer in Washington, D.C., covering business, finance, and politics.
More from Sara →CISA has confirmed active exploitation of CVE-2026-20253, a critical Splunk Enterprise flaw that allows unauthenticated remote attackers to manipulate files, and ordered federal civilian agencies to patch by Sunday under Binding Operational Directive 26-04.
Market intelligence platform Klue has confirmed attackers stole OAuth tokens connected to customer Salesforce environments on June 12, as the newly emerged Icarus extortion group publicly claims responsibility and the list of affected organizations continues to grow.
Human Rights Watch obtained Bulgarian export licensing records showing surveillance firm Circles sold phone-interception and geolocation tools to ten governments — including the UAE, Bahrain, and Azerbaijan — between 2018 and 2023, raising fresh questions about the EU's export control enforcement.
Written for readers who already know the basics — markets, AI, and the policy decisions that shape both.