Ethical Hacking News
CrowdStrike has announced its $740 million acquisition of SGNL, an identity security startup, highlighting the growing threat of identity-based attacks as companies face challenges in securing non-human identities, including AI agents. The deal underscores CrowdStrike's strategic push into identity security and reflects a broader industry trend towards emphasizing this critical area.
CrowdStrike has announced its intention to acquire SGNL, an identity security startup, in a deal worth $740 million.The acquisition aims to enhance CrowdStrike's Falcon cloud security platform with bolstered identity capabilities.SIGNL's solution focuses on dynamic signals and real-time authorization for agentic AI security, addressing challenges of non-human identities like AI agents.Industry analysts praise the move as strategic but pricey, highlighting SGNL's capabilities critical for enterprises dealing with identity security in AI environments.The acquisition echoes a similar trend set by Palo Alto Networks, emphasizing the importance of identity security as no longer an optional feature but a battleground for platform differentiation.
CrowdStrike, a leading cybersecurity firm, has announced its intention to acquire SGNL, an identity security startup, in a deal worth $740 million. This acquisition marks CrowdStrike's second major push into the realm of artificial intelligence (AI) security, following a similar move made by the company last year.
The acquisition of SGNL is significant not only because of the financial backing but also due to its strategic implications for CrowdStrike's product offerings and services. As reported in The Register, CrowdStrike has been actively expanding its capabilities to address growing threats related to identity security, particularly with regards to non-human identities such as AI agents.
According to Michael Sentonas, CrowdStrike President, the acquisition of SGNL will enhance the company's Falcon cloud security platform by bolstering its identity capabilities. This move is aimed at providing "context-aware authorization" for human, machine, and AI agent identities. By doing so, CrowdStrike aims to help organizations navigate the complexities of securing identities in a rapidly expanding digital landscape.
SGNL CEO Scott Kriz underscored the significance of this deal, stating that when he left Google, he saw an industry at an inflection point. The challenge he highlighted was not just authentication but authorization - ensuring that access is granted based on context and privileges required for specific tasks rather than merely verifying identity.
The SGNL team, having been co-founded by Kriz and fellow ex-Googler Erik Gustavson in 2021, had raised $42 million from investors, including a $30 million funding round in February. Their solution is centered around dynamic signals (aka Shared Signals Framework) for real-time authorization and providing context-based controls necessary for agentic AI security.
Industry analysts have praised this move as strategic, albeit pricey, to CrowdStrike's expanding identity security offerings. Todd Thiemann, Omdia principal analyst, noted that SGNL brings capabilities critical for enterprises dealing with the challenges of identity security in AI environments. The deal enables CrowdStrike to further extend its reach into this crucial area and strengthen its vision for next-gen PIM (privileged identity management) and AI security.
The acquisition echoes a similar trend set by Palo Alto Networks when it acquired CyberArk's identity security-related assets last year. Mauricio Sanchez, Dell'Oro Group senior director, highlighted the importance of identity security as no longer being an optional feature but a battleground for platform differentiation in the cybersecurity landscape.
"CrowdStrike is effectively saying: security vendors want to be in the path of access, not only in the path of detection," Sanchez said. "The strategic value lies in tighter linkage between risk signals and real-time authorization across SaaS, cloud, and APIs."
Merritt Maxim, Forrester VP and research director, also emphasized the significance of this deal, pointing to the Shared Signals Framework (SSF) as a crucial component for companies looking to improve their risk-based authentication and speed up threat detection and response. "SGNL brings authorization capabilities based on dynamic signals and real-time authorization which are important for enforcing zero standing privilege and context-based controls needed for agentic AI," Maxim noted.
The deal not only validates the importance of SSF in the agentic AI era but also underscores CrowdStrike's optimism about growth opportunities in identity security going forward. As the company continues to push into new areas, it is clear that identity security will remain a critical focus area for businesses aiming to navigate the evolving digital landscape with their growing use of AI.
Related Information:
https://www.ethicalhackingnews.com/articles/CrowdStrikes-740-Million-Acquisition-of-SGNL-A-New-Era-in-Identity-Security-for-AI-Powered-Businesses-ehn.shtml
https://go.theregister.com/feed/www.theregister.com/2026/01/08/crowdstrikes_740m_sgnl_deal_proves/
Published: Thu Jan 8 16:22:16 2026 by llama3.2 3B Q4_K_M
