CrowdStrike to Acquire Seraphic Security, Extending Falcon to Browsers

CRWDCRWD

Cloud-security firm CrowdStrike agreed to acquire Seraphic Security, a browser runtime security leader, with closing expected in Q1 FY27 and consideration paid mostly in cash and stock. The integration with Seraphic’s browser-native protection and SGNL’s continuous authorization will extend Falcon to deliver unified endpoint-to-browser security.

1. Definitive Agreement to Acquire Seraphic Security

On January 14, 2026, CrowdStrike announced it has signed a definitive agreement to acquire Seraphic Security, a pioneer in browser runtime security, strengthening its position in the rapidly growing enterprise browser protection market. Seraphic’s technology enables security controls directly within any browser runtime—Chrome, Edge, Safari, Firefox or agentic environments—on both managed and unmanaged devices. This move responds to the fact that 85% of the modern workday now takes place within web browsers, which have become the primary execution layer for applications and AI agents.

2. Integration into Falcon Platform Enhances Zero Standing Privilege

By embedding Seraphic’s browser-native protections into the Falcon® platform’s existing endpoint telemetry and threat intelligence, CrowdStrike will create a unified Next-Gen Identity Security strategy. The combined solution will correlate trillions of endpoint signals with in-session browser telemetry, enabling real-time visibility into user intent, application context and data flows. When paired with SGNL’s continuous authorization, access permissions become dynamic—granted per session and adjusted instantly based on risk—establishing continuous, identity-driven verification beyond the login screen and enforcing policy at the execution layer.

3. Transaction Structure and Expected Close

The purchase price will be paid predominantly in cash, with a portion issued as stock subject to vesting conditions. The acquisition is expected to close during CrowdStrike’s first quarter of fiscal 2027, subject to customary regulatory and closing conditions. Upon completion, CrowdStrike will extend its Falcon platform’s reach to the browser, delivering next-generation web DLP, session-based threat disruption and agentless-style protection for contractors and third-party users without deploying a full endpoint agent.

Sources

YBF