CrowdStrike is buying Seraphic Security to lock down the browser, where work actually happens

CrowdStrike agreed to acquire Seraphic Security to integrate browser runtime protection into the Falcon platform, reportedly for $420 million, with closing expected in its first fiscal quarter of 2027. The move targets the growing security gap in browser-based work, offering cross-browser protections on managed and unmanaged devices and addressing risks from “shadow AI,” session hijacking, and sophisticated phishing. Paired with the planned $740 million acquisition of identity startup SGNL, CrowdStrike aims to enable dynamic, session-level access controls aligned with a Zero Standing Privilege model, expanding beyond traditional endpoint detection.