Key facts
- The initial kill switch works through AI gateways, blocking an agent's access to the models powering its decisions.
- CrowdStrike said direct endpoint termination and cross-cloud restrictions are planned but have no release date.
- Falcon Guardian can inspect agent prompts and apply policies to tools including Claude Code, OpenAI Codex and GitHub Copilot.
- CrowdStrike said the Fiddler transaction would be paid primarily in cash, with some stock subject to vesting conditions.
- CrowdStrike expects to complete the Fiddler acquisition in the fourth quarter of fiscal 2027, which ends January 31, 2027.
CrowdStrike introduced an AI agent kill switch on November 3, 2026, at its Fal.Con Europe 2026 conference in Barcelona, and said it signed an agreement to acquire AI observability startup Fiddler AI.
The kill switch lets security administrators interrupt an agent's activity without waiting for it to finish a task. According to CrowdStrike's technical explanation, the mechanism available at launch works through AI gateways, which can block an agent's access to the models powering its decisions. An authorized administrator triggers the switch and the action is recorded in an audit trail.
The initial release does not include every containment method CrowdStrike has described. The company said it plans to expand the feature to terminate agent processes directly on endpoints and to coordinate restrictions across cloud environments and other enterprise systems. It gave no release date for those capabilities. CrowdStrike also described controls to stop terminated agents from restarting and to restrict their network access, with broader enforcement still under development.
CrowdStrike said Falcon Guardian can inspect agent prompts and apply policies to tools including Claude Code, OpenAI Codex, GitHub Copilot, Microsoft 365 Copilot, Cursor and OpenCode. The company framed the controls around agents that can execute code, reach sensitive information and act with limited human oversight.
The Fiddler acquisition would add monitoring of AI models and explanations of their behavior. Fiddler's software evaluates agents before deployment, traces their decisions and tool calls, and monitors behavior changes after they begin operating, according to CrowdStrike's description. The Wall Street Journal reported the deal values Fiddler at roughly $400 million. CrowdStrike did not publicly disclose the price but said the transaction would be paid primarily in cash, with some stock subject to vesting conditions.
CrowdStrike said it expects to complete the Fiddler acquisition in the fourth quarter of fiscal 2027, which ends January 31, 2027, subject to customary closing conditions.