CrowdStrike to acquire identity security firm SGNL for $740m

CrowdStrike has agreed to acquire SGNL, an identity security company, in a deal valued at US$740 million.

The acquisition aims to enhance its Falcon platform with continuous authorization for human, non-human, and AI identities.

CrowdStrike said the acquisition will allow its Falcon next-gen identity security to grant and revoke access for human, non-human, and AI agent identities dynamically, rather than relying on static policies.

SGNL’s technology will integrate with cloud identity providers and software as a service (SaaS) applications to monitor identity risk and enforce access controls across hybrid environments.

🔗 Source: Crowdstrike

🧠 Food for thought

Implications, context, and why it matters.

Deployed at several Fortune 50 firms, SGNL removed always-on access in production, with one automaker cutting 30,000 static roles to six contextual policies 1.
Older Privileged Access Management (PAM) and Identity Governance and Administration (IGA) tools use batch jobs plus fixed permissions built for perimeter security 1. SGNL makes split-second decisions from live signals, which cuts approval waits from hours to seconds 1 while restoring dynamic risk checks missing in traditional Identity and Access Management (IAM) 2.
The OpenID Foundation Continuous Access Evaluation Protocol (CAEP) keeps sessions active only when context allows without constant reauthentication 3, so privileged activity is managed or revoked with context-aware signals 4 rather than left open in windows that attackers exploit 4.

With CrowdStrike’s planned integration, SGNL is expected to extend Falcon Next-Gen Identity Security just-in-time access beyond Microsoft Active Directory plus Microsoft Entra ID (formerly Azure Active Directory) to include AWS Identity and Access Management (IAM) as well as Okta 5, which opens room for connectors to custom apps that don’t fit standard IAM tools 3.
Independent Software Vendors (ISVs) plus security operations platforms can build managed services that wrap continuous authorization around Falcon which scored 100% in 2025 MITRE ATT&CK evaluations for detection and protection 6 using unified identity telemetry (consolidated identity-related activity data) 5 to reach enterprises through established partners 7, backed by an identity business with over $435 million in annual recurring revenue 8.