CrowdStrike said on 13 January 2026 that it had signed a definitive agreement to acquire Seraphic Security, an Israeli startup whose software adds security controls inside any web browser. CrowdStrike plans to fold the technology into its Falcon platform.
CrowdStrike did not disclose the price. Calcalist reported that the deal was worth about $400 million, while a source told CyberScoop it was worth $420 million. CrowdStrike said the price would be paid mostly in cash, with part paid in stock subject to vesting conditions. The deal is expected to close in CrowdStrike's first quarter of fiscal 2027, subject to customary conditions.
Seraphic had raised about $37 million, including a $29 million Series A in January 2025 in which CrowdStrike's own venture arm, the Falcon Fund, took part.
What Seraphic built
Seraphic was founded in 2020 by chief executive Ilan Yeshua, a former longtime chief executive of the Israeli news site Walla, and chief technology officer Avihay Cohen. According to Calcalist, the company had more than 50 employees.
Instead of asking companies to move staff to a dedicated enterprise browser, Seraphic enforces security policies inside the browser people already use, whether Chrome, Edge, Safari, Firefox or newer agentic browsers. It works on company-managed and personal devices and is meant to give employees and contractors secure access to SaaS and internal web apps without a VPN or virtual desktop. Calcalist reported that it also covered desktop apps built on web technology, such as Teams, Slack and WhatsApp.
CrowdStrike listed several capabilities it expects from the integration: controls over how generative AI apps and agents are used in the browser, continuous identity checks during a session, data loss prevention that blocks copying, uploading or screenshots of sensitive data, and protection against session hijacking and phishing. CrowdStrike said the last is done in part by randomising the browser's JavaScript engine.
“The browser is where modern work happens. In joining CrowdStrike, we are bringing platform-level protection to the most important execution layer in the enterprise, ensuring that zero trust is a continuous reality, not just a gateway check.”
Why CrowdStrike is buying
CrowdStrike argued that the browser has become where most work happens but remains a blind spot for security teams, citing a figure that 85% of the workday is spent in a browser. It said existing tools either push users into locked-down enterprise browsers or route traffic through network systems that add latency.
The company plans to combine Seraphic's in-session browser data with its endpoint telemetry and threat intelligence, and with continuous authorisation technology from SGNL, the identity startup it agreed to buy the week before for $740 million, according to CyberScoop. The aim is to grant and revoke access per session based on live risk signals rather than fixed credentials.
Chief executive George Kurtz said that separating security from the browser itself would let CrowdStrike turn any browser into a secure enterprise browser without forcing users to change how they work.
The investors
GreatPoint Ventures led Seraphic's $29 million Series A. The CrowdStrike Falcon Fund joined the round, along with existing investors Planven, Cota Capital and Storm Ventures, Calcalist reported. Seraphic's total funding came to about $37 million.
If the reported price is accurate, the deal values Seraphic at more than ten times the capital it raised.
CrowdStrike's Israeli shopping list
Calcalist counted Seraphic as CrowdStrike's sixth acquisition of an Israeli company and its first since 2024. Earlier deals included Adaptive Shield for about $300 million in November 2024, Flow Security for about $200 million in March 2024, and Bionic for about $350 million.
The purchase also puts CrowdStrike into a browser security market where its rivals have already moved. Calcalist named Talon, which Palo Alto Networks acquired, and Island among Seraphic's competitors. With SGNL and Seraphic announced within a week of each other, CrowdStrike announced two acquisitions in the first half of January, and CyberScoop noted that the company was continuing to expand beyond its core endpoint detection business.
