CrowdStrike Moves From EDR to AIDR with Pangea Acquisition

CrowdStrike acquired Pangea for $260 million this week in a bid to define the next major security standard. A decade ago, the company was one among the pioneers of endpoint detection and response (EDR), which became the model for protecting devices. Now CrowdStrike wants to do the same for artificial intelligence, coining “AI Detection and Response”. “With Pangea, CrowdStrike will secure the entire AI lifecycle, detecting risks, enforcing safeguards, and ensuring compliance, so our customers can confidently build, deploy, and scale AI without risk,” said George Kurtz, co-founder and CEO of CrowdStrike.

As enterprises adopt generative AI tools and deploy autonomous agents, every interaction creates a potential vulnerability. “AI is rewriting the enterprise attack surface at breakneck speed. Each prompt becomes an entry point for the adversary,” Kurtz said. Pangea, founded in 2021, specializes in protecting AI applications at the interaction layer, the prompts and responses where attackers look for openings.

Pangea’s technology is designed to stop prompt injection attacks, jailbreak attempts, and data leakage before they cause damage. It also allows enterprises to govern how employees interact with AI systems. Oliver Friedrichs, Pangea’s founder and CEO, explained the mission: “Pangea was founded to make AI adoption safe and secure, giving enterprises the visibility and guardrails to embrace AI with confidence.” By pulling these capabilities into Falcon, CrowdStrike looks to position itself as the company that can protect AI use from development to deployment.

This approach contrasts with the strategies of larger competitors. Palo Alto Networks is spending $25 billion to acquire CyberArk. Check Point announced its acquisition of Lakera, another AI security firm, on the same day CrowdStrike revealed the Pangea deal. Google paid $32 billion for Wiz to strengthen cloud security. These are massive bets. CrowdStrike’s strategy is smaller, focused acquisitions that can be tightly integrated. Kurtz described to SiliconANGLE: “Our philosophy is long-term thinking. Customers don’t want four platforms. Ultimately, when companies acquire too much, it is digital taxidermy - it looks alive, but it’s Frankenstein underneath.”