CrowdStrike is expanding the Falcon platform with Continuous Identity, redefining privilege and access for all users everywhere – from human to non-human AI agents.

CrowdStrike (NASDAQ: CRWD) today announced it has signed a definitive agreement to acquire SGNL, a leader in Continuous Identity. This acquisition accelerates CrowdStrike’s leadership in Next-Gen Identity Security, enabling access for human, non-human (NHI), and AI identities to be continuously granted and revoked based on real-time risk. With SGNL, CrowdStrike will extend dynamic authorization across SaaS and hyperscaler cloud access layers, setting a new standard for agentic identity security.

“AI agents operate with superhuman speed and access, making every agent a privileged identity that must be protected. With SGNL, CrowdStrike will deliver continuous, real-time access control that eliminates the known and unknown gaps from legacy standing privileges. We’re disrupting the premise of modern privilege and access – for every identity, human or machine. This is identity security built for the AI era.”
– George Kurtz, CEO and Founder of CrowdStrike

Falcon Next-Gen Identity Security: Built for the AI Era

Identity security is becoming one of cybersecurity’s fastest-growing segments. According to IDC, the identity security market is expected to grow from approximately $29 billion in 2025 to $56 billion by 2029.

As non-human identities and the agentic workforce expand, these entities act as high-privilege identities with access to data, applications, compute resources, and other agents. They are dynamically created in SaaS and hyperscaler environments and operate across distributed cloud access paths. Legacy identity models based on static policies and standing privileges are no longer sufficient, as they cannot reassess risk or revoke access dynamically when threat conditions change.

Falcon® Next-Gen Identity Security already secures the full hybrid identity lifecycle, including initial access prevention, privileged access management (PAM), identity threat detection and response (ITDR), SaaS identity security, and agentic identity protection. It correlates identity, asset, and threat intelligence across endpoints, cloud, and SaaS environments to enable continuous, risk-aware authorization.

Securing Modern Identities with SGNL

SGNL acts as the runtime access enforcement layer between modern identity providers and the SaaS and hyperscaler resources accessed by people, NHIs, and AI agents. Powered by real-time Falcon platform intelligence, SGNL will continuously evaluate identity, device, and behavioral signals to dynamically grant, deny, or revoke access as conditions change.

Key Benefits of the SGNL and Falcon Platform Integration

• Eliminate Standing Privileges: Grant access only when needed and revoke it immediately when no longer required using continuous, dynamic authorization.
• Universal Access Enforcement: Extend Just-in-Time access beyond Active Directory and Entra ID to AWS IAM, Okta, and other cloud identity and SaaS systems.
• Identity Governance and Downstream Protection: Use CAEP-driven enforcement integrated with Falcon® Fusion SOAR to revoke access beyond the identity provider and prevent misconfiguration-driven breaches.
• Unified Hybrid Identity Security: Secure every identity across on-prem, SaaS, and cloud environments from initial access to lateral movement.

“SGNL was founded to connect access decisions with business reality. The world needs our technology to eradicate the risk that legacy standing privileges expose in modern environments. Joining CrowdStrike gives us global scale through cybersecurity’s leading platform, accelerating the adoption of Continuous Identity.”
– Scott Kriz, CEO and Co-Founder of SGNL

Transaction Details

The purchase price is expected to be paid predominantly in cash, with a portion delivered in stock subject to vesting conditions. The acquisition is anticipated to close during CrowdStrike’s first quarter of FY’27, pending customary closing conditions and regulatory approvals.