**CrowdStrike Acquires Browser Security Startup Seraphic Security for $400M**
CrowdStrike Holdings Inc. has made a significant move in the cybersecurity space by acquiring browser security startup Seraphic Security Ltd. for a reported $400 million. The acquisition is aimed at enhancing CrowdStrike's flagship Falcon platform, which provides endpoint protection and threat detection capabilities.
Seraphic Security, based in Palo Alto, California, and Israel, has developed a software platform that hardens workers' browsers against web-borne cyberattacks. The company's technology injects an abstraction layer into the host browser, isolating its JavaScript engine from malicious requests. This makes it difficult for hackers to exploit memory corruption bugs, which can lead to ransomware and other threats.
Seraphic's platform also analyzes over 200 data points about each webpage visited by employees, identifying potential threats such as phishing links and ransomware. Additionally, the software scans files uploaded to cloud services for business information that shouldn't be shared outside the organization, and blocks potential data leak vectors like clipboard access, screen sharing, and printing features.
What's more, Seraphic's technology can secure desktop applications based on the open-source Electron framework, which uses Chromium, the browser engine behind Chrome. This capability will allow CrowdStrike to expand its protection beyond browsers to other applications as well.
"With Seraphic, we will transform the SOC by correlating trillions of endpoint signals with deep, in-session browser telemetry," wrote CrowdStrike President Michael Sentonas in a blog post. "This will allow the Falcon platform to understand user behavior, application context, and data flow in real time, unlocking insight into browser-based risk that standalone enterprise browsers and legacy security often can't achieve."
The acquisition is not only aimed at enhancing CrowdStrike's existing capabilities but also at preventing unauthorized artificial intelligence (AI) use. Following the deal, Seraphic will roll out new safeguards against so-called shadow AI services, designed to protect both company-issued computers and employees' personal devices.
CrowdStrike plans to integrate Seraphic's technology with its Falcon platform and another startup, SGNL Inc., which it acquired last week for $740 million. The combined effort will enable the company to secure workers' browser sessions in real-time, providing a more comprehensive security solution for enterprises.
The acquisition is seen as a strategic move by CrowdStrike to expand its presence in the cybersecurity market and address the growing concerns of web-borne attacks. As the threat landscape continues to evolve, this deal demonstrates the company's commitment to innovation and staying ahead of emerging threats.