# CrowdStrike agrees to buy SGNL for 740 million dollars

Source: https://startwithidentity.com/blog/2026-01-08-crowdstrike-to-acquire-sgnl-continuous-identity/
Last updated: 2026-10-31
License: content by Start with Identity. Cite the source URL.

---

[CrowdStrike](https://startwithidentity.com/vendors/itdr/crowdstrike-falcon-identity/) has signed a definitive agreement to acquire [SGNL](https://startwithidentity.com/vendors/authorization/sgnl/) for approximately 740 million dollars, predominantly cash with a stock component subject to vesting. SGNL was founded in 2021 by former Google executives and builds continuous identity: authorisation re-evaluated in real time using the Continuous Access Evaluation Profile, plus [just-in-time access](https://startwithidentity.com/glossary/jit-access/) that grants privilege for a task and withdraws it afterwards rather than leaving it standing. CrowdStrike is folding it into Falcon, where the identity business has passed 435 million dollars in annual recurring revenue, with the stated goal of granting and revoking access for human, non-human, and AI identities based on live risk. The deal is expected to close in CrowdStrike's fiscal 2027.

## Why it matters

Most identity products still make one decision at login and then trust a session for hours. CAEP inverts that: the identity provider pushes a signal, the relying party re-evaluates, and access ends mid-session when risk changes. It is the right answer to [token theft](https://startwithidentity.com/glossary/token-theft/) and session hijacking, and it has been standards-ready for years while adoption lagged because both sides of the exchange had to implement it.

CrowdStrike buying it matters because it holds the risk signal. An endpoint detection product that already knows a device is compromised is well placed to cut sessions rather than raise an alert.

In hindsight this deal set the pattern the rest of 2026 followed: platform vendors buying identity control planes rather than building them, from [Palo Alto and CyberArk](https://startwithidentity.com/blog/2026-02-11-palo-alto-networks-completes-cyberark-acquisition/) to [Okta and Permiso](https://startwithidentity.com/blog/2026-07-30-okta-signs-definitive-agreement-to-acquire-permiso-security/). The [acquisitions tracker](https://startwithidentity.com/acquisitions/) has the full list.

**Update, October 31, 2026:** The deal closed on February 20, 2026. CrowdStrike's [fiscal 2026 10-K](https://www.sec.gov/Archives/edgar/data/1535527/000153552726000010/crwd-20260131.htm) records the purchase at about 637 million dollars (627.9 million in cash net of cash acquired, plus 8.9 million in replacement awards), below the roughly 740 million dollars quoted at announcement. Our [Identity Consolidation Report 2026](https://startwithidentity.com/reports/identity-consolidation-report-2026/) compares announced and filed prices across identity deals.

Source: [CrowdStrike](https://www.crowdstrike.com/en-us/press-releases/crowdstrike-to-acquire-sgnl-to-transform-identity-security-for-ai-era/)