CrowdStrike has signed a definitive agreement to acquire Seraphic Security, a leader in browser runtime security. This acquisition will integrate Seraphic's technology into the Falcon platform, aiming to turn any browser into a secure enterprise browser and extend Zero Trust principles directly into the browsing session to protect the modern, AI-driven workforce.
CrowdStrike announces the acquisition of browser security firm Seraphic Security.
The move integrates browser runtime protection into the CrowdStrike Falcon platform.
It aims to secure any browser (Chrome, Edge, Safari, Firefox) without forcing a specific choice.
The goal is to create a unified security fabric from endpoint through browser to cloud.
The acquisition will enhance protection for AI applications and secure unmanaged/BYOD devices.
The transaction is expected to close in CrowdStrike's first quarter of FY'27.
CrowdStrike's acquisition of Seraphic addresses the browser as a critical security blind spot, where 85% of the workday occurs. Unlike "walled garden" enterprise browsers, Seraphic's technology enforces security directly within the runtime of any browser—Chrome, Edge, Safari, or Firefox—on both managed and unmanaged devices. This decouples security from the browser itself, allowing user choice without compromising protection.
By fusing Seraphic's in-session browser protection with the Falcon platform's endpoint telemetry and SGNL's continuous authorization, CrowdStrike aims to deliver a unified Next-Gen Identity Security strategy. This creates a seamless security fabric that protects every interaction, correlating trillions of endpoint signals with deep browser telemetry to understand user intent and data flow in real time, enabling dynamic, risk-based access decisions.
The integration is designed to deliver key advantages for the AI-driven enterprise. This includes protecting enterprise AI applications at the browser layer to prevent data exfiltration, enforcing in-session Zero Trust with continuous verification, enabling next-gen web data loss prevention (DLP), disrupting session-based threats like sophisticated phishing, and providing "agentless-style" security for unmanaged or BYOD devices used by contractors and third parties.
The acquisition positions CrowdStrike to define the future of Zero Standing Privilege for the modern workforce, where security is continuous and context-aware, moving beyond static gateway checks to protect the entire user session from endpoint to cloud.
About CrowdStrike
CrowdStrike, a global cybersecurity leader, has redefined modern security with the world’s most advanced cloud-native platform for protecting critical areas of enterprise risk – endpoints and cloud workloads, identity and data.
Powered by the CrowdStrike Security Cloud and world-class AI, the CrowdStrike Falcon® platform leverages real-time indicators of attack, threat intelligence, evolving adversary tradecraft, and enriched telemetry from across the enterprise to deliver hyper-accurate detections, automated protection and remediation, elite threat hunting, and prioritized observability of vulnerabilities.