CrowdStrike has announced its agreement to acquire SGNL, a leader in identity-first security, for $740 million.
The acquisition marks a significant step toward strengthening CrowdStrike’s Falcon Next-Gen Identity Security platform with continuous, context-aware authorization capabilities across human, non-human, and AI agent identities operating in SaaS and cloud environments.
The identity landscape has fundamentally transformed. Cloud adoption, SaaS proliferation, and the rapid emergence of AI-powered applications have created an expanded attack surface that legacy security models were never designed to protect.
Organizations now face the complex challenge of securing not just human users, but also non-human identities, service accounts, API keys, and autonomous AI agents that operate with elevated privileges across distributed cloud environments.
Dynamic Authorization Replaces Static Privileges
The core challenge SGNL addresses is eliminating standing privileges. Traditional identity and access management solutions rely on static policies that grant permanent access based on initial provisioning.
SGNL introduces a fundamentally different approach: runtime access enforcement that continuously evaluates risk conditions and dynamically grants or revokes access in real time.
This runtime enforcement layer sits between identity providers and cloud resources, receiving real-time risk signals from the Falcon platform, identity providers, SaaS applications, and enterprise context sources like ServiceNow.
When unusual login locations, suspicious endpoint states, or other risk indicators emerge, SGNL immediately responds by revoking unnecessary access, transforming identity security from a binary permission model into an intelligent, risk-aware system.
Non-human identities have become critical infrastructure components that attackers actively target. As organizations deploy more AI agents and automated processes, these machine identities often possess high-privilege access to data, applications, and other AI agents.
SGNL extends CrowdStrike’s just-in-time access capabilities, currently supporting Active Directory and Entra ID, to include AWS IAM, Okta, and other cloud identity providers, addressing the complexity of hybrid environments.
The acquisition represents CrowdStrike’s broader commitment to comprehensive identity security spanning the entire identity lifecycle.
Combined with recent launches, including Falcon Privileged Access, FalconID, and the acquisition of Pangea for AI development security, CrowdStrike is positioning itself as a unified platform for securing every identity type in the modern cloud era.
SGNL’s capabilities will integrate with Falcon Fusion SOAR to enable downstream access revocation, preventing misconfiguration-driven breaches beyond the identity provider.
As identity-based attacks continue to drive enterprise breaches, SGNL’s continuous dynamic authorization represents a critical evolution in how organizations protect their expanding attack surface in an AI-driven world.
Follow us on Google News , LinkedIn and X to Get More Instant Updates. Set Cyber Press as a Preferred Source in Google.
%20(1).webp?fit=1600,900&ssl=1&description=The acquisition marks a significant step toward strengthening CrowdStrike's Falcon Next-Gen Identity Security platform with continuous){kind=link}