Cybersecurity is extra than simply software program, says George Kurtz, CEO and cofounder of CrowdStrike.
“What we do at CrowdStrike is as previous as time,” he instructed Fortune. “It’s good versus evil. It’s a human nature story embodied in know-how.”
It’s a battle that’s extra pressing and sophisticated than ever, because the rise of AI has ballooned the variety of cyber threats and cyber criminals. This makes M&A—a longstanding characteristic of the cybersecurity sector—extra high-stakes than ever. To make sure, a few of the largest offers of 2025 have been in cyber, from Palo Alto Networks’ $25 billion acquisition of CyberArk to Google’s proposed $32 billion acquisition of Wiz.
CrowdStrike, which went public in 2019, can be a longtime acquirer, and at present introduced its acquisition of information observability startup Onum for about $290 million. CrowdStrike at present additionally introduced its Q2 2025 earnings, beating expectations however providing a softer-than-expected income outlook sending its shares down roughly 4% in after hours buying and selling.
Kurtz solely spoke to Fortune in regards to the Onum deal and CrowdStrike’s M&A technique going ahead.
“We wish to get issues on the proper stage,” he stated. “Once you take a look at a few of these different acquisitions, like CyberArk, you’re speaking a few 20-year-old know-how firm with plenty of integration threat. These are huge firms, and I’ve seen the film earlier than. Once I was at McAfee, we acquired 21 firms, and by no means fairly received them built-in… So, when it comes right down to it, we’re maniacally targeted on the shopper expertise, on ensuring we’re disciplined sufficient to get these things built-in. We’ve a fantastic monitor document of doing that.”
Onum marks certainly one of CrowdStrike’s early offers since final 12 months’s much-publicized IT outage, which Kurtz says didn’t derail its M&A efforts, however provided a pause. Within the aftermath, CrowdStrike set a excessive bar and kept away from closing any offers, whereas persevering with to speak to firms, entrepreneurs, and VCs, holding the M&A pipeline energetic, stated Kurtz. The Onum deal in the end got here collectively in three months. The Madrid-based startup, which counts Daybreak Capital and Perception Companions amongst its VC backers, was particularly compelling to CrowdStrike for its real-time pipeline detection—the flexibility to investigate and detect threats or anomalies in information as it’s being ingested into an organization’s techniques.
“If you consider the info we have now, we began changing into the Reddit of safety information for all these AI fashions,” stated Kurtz. “The extra information we get in, the bigger the moat we even have, and the higher the chance we have now to unravel greater and broader issues from an AI perspective. That’s actually driving our imaginative and prescient for AI-native SOC [security operations center]. It’s a pure extension.”
Partially, that is wanting in the direction of a future stuffed with AI brokers.
“Our aim is to safe each AI agent,” stated Kurtz. “Okay, what’s an AI agent? An AI agent is mainly superhuman. It has entry to information. It has an identification, although it is perhaps a non-human identification. It has entry to a workflow, and it has entry to techniques which might be exterior of your personal boundaries… So, it has all the publicity that we’re defending in opposition to.
In plenty of methods, Onum is a traditional CrowdStrike deal. Since 2017, CrowdStrike has acquired eight firms, together with Humio in 2021 for $400 million and Movement Safety in 2024 for a reported $200 million.
“There are some firms which might be clearly richly-valued,” Kurtz stated. “I feel a few of these firms don’t understand that they’re beginning to transfer into zombieland: You take a look at their final spherical valuation, and it is perhaps nice for them, but it surely’s costly and it’s essentially actionable for lots of firms, even ours… So, you begin to hit these huge, multi-billion greenback valuations with not plenty of ARR, comparatively talking, and your pool of patrons dramatically shrinks. That’s why we wish to catch them within the candy spot of the place we are able to add worth, and that worth accrues to CrowdStrike’s shareholders.”
The aim, in the long run, stays the identical—safety, and preventing the dangerous guys (who now have extra weapons to play with).
“With gen AI, we’re democratizing destruction,” stated Kurtz. “We’re taking a really refined subject identified by a comparatively few variety of folks … and now you’re making all that experience out there to many extra folks. … The most important factor is that you just’re actually compressing the timeframe that the great guys have to have the ability to take care of these issues, as a result of the dangerous actors are transferring a lot sooner now.”
What’s one factor Kurtz is certain of, seeking to the long run?
“We all know there’s going to be a higher want for safety tomorrow than there may be at present,” he stated.
