CrowdStrike Acquires Pangea for $260M to Bolster AI Security Capabilities

CrowdStrike to expand Falcon platform with $260 million Pangea deal, unifying AI lifecycle protection across data, infrastructure, and identity security

Pangea brings prompt injection defenses and governance to secure enterprise AI adoption CrowdStrike has announced plans to acquire AI security specialist Pangea Cyber in a deal valued at around $260 million. Enterprises are increasingly concerned about the security of AI platforms as adoption grows across industries, and the agreement, which is expected to close this quarter, will help CrowdStrike offer protection across every stage of enterprise AI use. Founded in 2021 and based in Palo Alto, California, Pangea monitors interactions between AI systems, users, and software. The startup specializes in preventing prompt injection attacks, where hackers trick LLMs into ignoring safeguards, potentially exposing sensitive data or executing harmful actions. "AI is rewriting the enterprise attack surface at breakneck speed. Each prompt becomes an entry point for the adversary," said George Kurtz, chief executive of CrowdStrike. "With Pangea, CrowdStrike will secure the entire AI lifecycle, detecting risks, enforcing safeguards, and ensuring compliance, so our customers can confidently build, deploy, and scale AI without risk," he added. Pangea's acquisition will allow CrowdStrike to extend its Falcon agentic security platform and offer the industry's first complete AI Detection and Response, or AIDR, securing data, models, agents, identities, infrastructure, and interactions from development through workforce usage. This will include visibility and control over AI agents and their workflows, safeguards to stop risky chatbot interactions, and low-latency defenses against malicious prompt manipulation. "Pangea was founded to make AI adoption safe and secure, giving enterprises the visibility and guardrails to embrace AI with confidence," said Pangea Cyber founder and chief executive, Oliver Friedrichs. "By joining CrowdStrike, we will be able to deliver this vision on a global scale, unifying AI security with the Falcon platform."

CrowdStrike and Check Point extend their AI security capabilities with new acquisitions - SiliconANGLE

CrowdStrike and Check Point extend their AI security capabilities with new acquisitions CrowdStrike Holdings Inc. and Check Point Software Technologies Ltd. today announced startup acquisitions designed to bolster their artificial intelligence security capabilities. CrowdStrike is buying Pangea Inc., which helps companies monitor how employees interact with external AI tools. Its software can also secure internal AI workloads. Check Point, in turn, has agreed to acquire a startup called Lakera Inc. that offers two cybersecurity tools with similar features. The Wall Street Journal reported today that CrowdStrike is paying about $260 million for Pangea. The deal represents a significant return for the startup's investors. Before the acquisition, Pangea raised about $27 million in funding from Alphabet Inc.'s GV fund, Okta Ventures and other institutional backers. Pangea provides a platform that helps enterprises monitor how workers use third-party AI services. Pangea can identify the applications that employees access and determine which AI models power those applications. Additionally, it can scan employees' prompts for cybersecurity risks. According to Pangea, its platform collects data on AI usage via a browser extension and an application called the AI Gateway. The latter tool doubles as a data leak prevention mechanism. It analyzes employees' AI prompts and removes any sensitive business information they main contain. Additionally, it can scan AI applications' prompt responses for malicious content. The other focus of Pangea's platform is helping companies secure their own AI applications. The software can filter malicious prompts designed to trick applications into leaking sensitive data. It also blocks other malicious activity, such as attempts to introduce vulnerabilities into an AI model. CrowdStrike plans to integrate Pangea's technology into its flagship Falcon cybersecurity platform. According to the company, the technology will enable customers to block up to 99% of the malicious prompts sent to their applications with latency of under 30 milliseconds. "CrowdStrike protects the foundation: endpoints, cloud workloads, data, identities, and AI models," CrowdStrike president Michael Sentonas wrote in a blog post. "Pangea secures the interactions: prompts, responses, and agent communications." Lakera, the other AI cybersecurity provider that was acquired today, raised about $31 million prior to its sale. The company counts Dropbox Inc. as an investor. Check Point didn't disclose the financial terms of the acquisition. Lakera has developed a tool Lakera Guard that can protect AI applications from malicious prompts. It's designed to block many of the same threats as Pangea's platform. Lakera also offers a second product, Lakera Red, that uses an AI agent to automatically scan AI applications for vulnerabilities. It then ranks those vulnerabilities based on their severity. Check Point will use Lakera's technology to extend the capabilities of its existing GenAI Protect security tool. The offering enables companies to identify what AI applications have been adopted by their employees and track how they're used. Lakera maintains engineering centers in San Francisco and Zurich. After the deal closes, the company will become the "foundation of Check Point's Global Center of Excellence for AI Security." The hub is tasked with developing features for the company's Infinity suite of cybersecurity products.

CrowdStrike To Expand AI Security Portfolio With Deal To Acquire Pangea

The startup, which CrowdStrike is reportedly planning to acquire for $260 million, offers guardrails for GenAI-powered applications. CrowdStrike has reached an agreement to acquire Pangea, a startup that offers guardrails for GenAI-powered applications, the company announced Tuesday. The Wall Street Journal had earlier reported the deal, citing a planned acquisition price of $260 million. CrowdStrike's news release announcing the deal did not mention the terms of the deal. [Related: 5 Big Takeaways From CrowdStrike's 2025 Partner Summit] CrowdStrike Co-founder and CEO George Kurtz spoke about the deal Tuesday during the vendor's Fal.Con 2025 conference in Las Vegas, saying the planned acquisition aims to enable CrowdStrike to offer "AI detection and response" capabilities. Pangea is "a leader in the space of protecting AI agents from the browser, application, gateway, cloud [and] in the development pipeline, as well as in production," Kurtz said during his keynote at Fal.Con 2025. Kurtz said he has known Oliver Friedrichs, founder and CEO of Pangea, for several decades. "What he was building [at Pangea], we thought was really special," Kurtz said. During CrowdStrike's Partner Summit 2025, held on Monday at Fal.Con, Kurtz said the massive industrywide adoption of AI is only likely to gain momentum as more agentic technologies become available, creating major opportunities for CrowdStrike and its partners. "But we can't be part of the change unless we secure it," he said. "Securing AI [is] going to be a big part of the future growth opportunity for us and our partners." The deal for Pangea comes after CrowdStrike announced plans in August to acquire a startup that provides data pipeline management, Onum, to boost its Falcon Next-Gen SIEM offering.