Pangea

Security for AI acquired

Market readinessHow well the company can compete in its security market, scored across eight dimensions against public evidence. Established: Market readiness of 25 to 30, the typical band where most analyzed companies land.
DefensibilityHow well the company holds its position if competitors catch up on features, scored across seven dimensions against public evidence. Contested: Defensibility of 13 to 14, the typical band, where a moat exists but is under pressure.
Founded 2021
Funding $52M
Last updated 2026-09-23

All analysis was generated autonomously, without human review. Scores are analytical opinions drawn from the cited public sources, without hands-on testing. They are not audits, certifications, investment reports, purchasing advice, or evaluations of quality.

Executive Summary

CrowdStrike bought Pangea in 2025 for $212.1 million in net cash and sells Pangea’s guardrails in its Falcon Guardian AI security product. The guardrails inspect prompts, responses, and agent activity so security teams can block malicious instructions and redact sensitive data. Oliver Friedrichs co-founded Pangea in 2021 after selling security company Phantom Cyber to Splunk. It raised $52 million, including a $26 million Series B led by GV. Pangea presents Grand Canyon Education as a customer that used its redaction on data sent to AI models. NAND Research lists AI security in Palo Alto Networks, Cisco, and Microsoft platforms as alternatives. Against those rivals, Pangea relies on switching costs, since a departing customer would have to reroute its AI traffic and recreate its policies.

Sourced Details

Description Pangea gives security teams a platform that detects and responds to AI threats and applies guardrails to stop prompt injection and sensitive data leakage across workforce AI use and AI applications. [f1]
Acquisition CrowdStrike, announced 2025-09-16 , now CrowdStrike Falcon Guardian [f2]
Founded 2021 [f3]
HQ Palo Alto, California, US [f4]
Funding $52M total [f5]
Latest funding Series B, $26M, led by GV (2022) [f5]
Deployment SaaS [f6]

Products

Product What it does
Pangea AI security guardrails that inspect prompts, responses, and agent activity to block prompt injection, redact sensitive data, and stop malicious content across LLM and agent traffic.

Matrix Coverage

AI Defense Matrix

GovernIdentifyProtectDetectRespondRecover
AI-Workload Platforms Inference servers, training platforms, vector DB platforms, and the model-loading supply chain.
AI Coding and Orchestration Tools AI coding tools and agentic orchestration tools on user devices, plus their plugins, skills, hooks, system prompts, scaffolding, harnesses, configuration settings, and MCP clients.
AI-Generated Code Code produced by AI tools, AI-assisted reviews, AI-generated infrastructure-as-code and tests, and vibe-coded apps that bypass CI/CD.
AI Traffic Paths to external and self-hosted AI services, MCP tool channels, agent-to-agent calls, model-registry downloads, and egress to unapproved AI services. AI gateways, LLM routers, and MCP gateways steer traffic along those paths. The steering decisions and their inputs belong here too: routing policies, MCP server registries, and agent naming and discovery services.
AI Model Model weights, fine-tuning checkpoints, model cards, registries, an AI bill of materials (AIBOM), and the third-party LLMs your enterprise consumes.
Training Data Datasets used for training, fine-tuning, and continued learning.
Runtime AI Data User prompts, inference inputs, RAG content, vector DB content, persistent agent memory, and interaction history.
AI Agent Identities AI agents as non-human principals, plus credentials, keys, permission scopes, service accounts, and delegation chains across agents and tools.

Pangea provides AI security guardrails that inspect prompts, responses, and agent activity to block prompt injection, redact sensitive data, and stop malicious content across LLM and agent traffic. It is mapped to the AI Defense Matrix. [f7]

Market Readiness

How well the company can compete in its security market, scored across eight dimensions against public evidence.

Established 27 /40 Established: Market readiness of 25 to 30, the typical band where most analyzed companies land.
Dimension Score Rationale
Problem Clarity How precisely the company defines its problem, with evidence the problem exists at the scale claimed. 3/5 Pangea and CrowdStrike name the buyer as security teams that need control over prompts, responses and agent activity in workforce AI use and in-house AI applications (s1, s5). A NAND Research note describes many vendors addressing AI agent and runtime security (s9), and the pain is described without independent quantification tied to this problem, which keeps it at a clear but unproven problem statement. [s1, s5, s9]
Capability Depth How specific the technical capabilities are, with evidence beyond marketing claims such as docs and third-party validation. 3/5 Pangea publishes developer documentation covering SaaS, Edge and Private Cloud deployment and API gateway integration (s15), and CrowdStrike documents runtime detection of direct and indirect prompt injection across 200+ techniques plus redaction of sensitive data (s2). The 99% efficacy and 100-millisecond figures come from CrowdStrike’s internal benchmark testing, and NAND Research ties wider adoption to independent testing of those claims (s2, s9). No external validation point in the record meets the next rung. [s15, s2, s9]
Market Timing Whether the market is ready for this product, with evidence that buyers are actively seeking solutions. 4/5 Two independent kinds of buyer-side signal fall within the last year. NAND Research’s September 2026 note describes the AI agent and runtime security category as crowded and rapidly evolving (s9). On CrowdStrike’s August 2026 earnings call, a Needham analyst said his firm’s work with CISOs keeps coming back to AI governance (s22). The enabler is enterprise use of generative AI and autonomous agents (s13). CrowdStrike’s own AIDR growth figures are the seller’s statements and are not counted. [s9, s22, s13]
Team Credibility Demonstrated domain expertise with public signals such as prior exits, publications, and industry recognition. 4/5 Founder Oliver Friedrichs has two in-domain exits, Immunet to Sourcefire and Phantom Cyber to Splunk for $350 million in 2018, reported by SecurityWeek and DataBreachToday (s11, s10), and co-founded Pangea with CTO Sourabh Satish (s13). That plurality of prior builds with independent reporting meets the differentiated rung, short of the category-defining record the top rung reserves. [s11, s10, s13]
GTM Proof Evidence of actual traction (customers, revenue signals, partnerships) beyond stated intentions. 3/5 Pangea presents a Grand Canyon Education case study on its homepage (s1). CrowdStrike says AIDR ending ARR nearly tripled in a quarter, that one of the world’s biggest banks adopted it (s22), and that AIDR works with AI gateway partners including Databricks, Google Cloud and Microsoft Azure (s20). One Pangea-presented customer plus unnamed adopters and partner integrations that the seller describes meet the one-or-two-reference rung, and the record lacks the multiply sourced named references the next rung needs. [s1, s22, s20]
Funding Efficiency Whether funding matches go-to-market ambition, with signs of capital-efficient growth. 4/5 SecurityWeek reported that the 2022 Series B brought the total raised by Pangea to $51 million (s12). CrowdStrike’s 10-Q records $212.1 million in cash, net of acquired cash, as the cash component of the consideration for the company in 2025 (s6). That filed exit confirms output per dollar. No independent profitability or operating-efficiency measure appears in the record, which holds it below the top rung. [s12, s6]
Category Clarity Whether the company creates or fits a recognizable category that buyers can quickly place in their stack. 3/5 SecurityWeek placed Pangea in AI security (s13), and NAND Research lists Falcon Guardian beside AI runtime security from Palo Alto Networks, Cisco and Microsoft (s9). CrowdStrike markets Falcon Guardian as AIDR (s19), and a single analyst placement falls short of the multiply evidenced placement the next rung asks for, so the category is recognizable but still forming. [s13, s9, s19]
Incumbent Defensibility How vulnerable the core value proposition is to absorption as a feature by a platform vendor. 3/5 NAND Research describes AI runtime security built into the Palo Alto Networks, Cisco and Microsoft stacks and calls purpose-built prompt and model-layer defense platforms often more mature on prompt injection detection (s9). CrowdStrike sells AIDR as a separately priced module (s4, s22). Specialization and inline integration add friction. The record shows no structural moat that would stop a platform from bundling the same controls. [s9, s4, s22]
Business Risks Palo Alto Networks, Cisco and Microsoft could keep AI runtime security deals inside their own network and cloud stacks, limiting Falcon Guardian to buyers already standardized on CrowdStrike…
  • Palo Alto Networks, Cisco and Microsoft could keep AI runtime security deals inside their own network and cloud stacks, limiting Falcon Guardian to buyers already standardized on CrowdStrike.
  • Independent tests could fail to reproduce the 99% prompt-attack detection efficacy CrowdStrike reports from internal benchmarks, weakening the performance claim behind Pangea’s guardrails.
  • CrowdStrike could center Falcon Guardian on endpoint agent discovery through its Falcon sensor, shrinking the share of the product that comes from Pangea’s prompt-layer guardrails.
  • Pangea stockholders covered by CrowdStrike’s service-based awards could leave after meeting their individual vesting requirements. Departures could reduce the acquired workforce.
  • AI model and platform providers could build prompt-injection and data-redaction controls into their own services within three to five years, shrinking demand for a separate guardrail layer.
Problem & Market Pangea sells guardrails for the prompts, responses and agent activity that pass between people, applications and AI models…

Pangea sells guardrails for the prompts, responses and agent activity that pass between people, applications and AI models. Its homepage says organizations can protect workforce AI use and ship secure AI applications with its guardrails, which stop threats ranging from prompt injection to sensitive data leakage. CrowdStrike, which bought Pangea in 2025, frames the same work as securing the interaction layer, where AI is built and used across the enterprise.

The buyer is the enterprise security team that owns AI risk. CrowdStrike’s blog puts the Falcon platform on endpoints, cloud workloads, data, identities and models, and puts Pangea on prompts, responses and agent communications. A September 2026 NAND Research note describes the AI agent and runtime security category as crowded and rapidly evolving, which shows other vendors treating the problem as real. [s1, s6, s4, s5, s9]

Product Capabilities Pangea’s guardrails inspect AI traffic at runtime to block prompt injection and redact sensitive data…

Pangea’s guardrails inspect AI traffic at runtime to block prompt injection and redact sensitive data. CrowdStrike describes Pangea as inspecting prompts, responses and agent activity to catch sensitive data or malicious instructions before they create risk, with development guardrails that stop malicious prompts and risky tool calls. Pangea’s documentation lists AI Guard and Prompt Guard as services with SaaS, Edge and Private Cloud deployment models.

The capability now ships inside CrowdStrike Falcon Guardian. CrowdStrike describes Falcon Guardian as its AI Detection and Response (AIDR) solution. In September 2026 it introduced Falcon Guardian as the evolution of Falcon AIDR, and it says existing Falcon Guardian controls continue to protect AI interactions against prompt injection and sensitive data exposure. The product page states detection of direct and indirect prompt injection across 200+ techniques and runtime redaction, encryption or blocking of sensitive data.

The performance figures are CrowdStrike’s own. The page lists 99% detection efficacy for prompt attacks and latency of 100 milliseconds or less, and a footnote says the metrics come from internal benchmark testing. NAND Research says wider adoption depends partly on what independent security teams find when they test the efficacy claims. [s5, s15, s4, s19, s2, s9]

Competitive Positioning Pangea’s guardrails now compete as part of a platform…

Pangea’s guardrails now compete as part of a platform. CrowdStrike acquired all of Pangea on September 26, 2025, according to its 10-Q, and sells the resulting AIDR product as a separately priced Falcon module. Pangea’s controls therefore reach buyers as one Falcon module.

The field includes both platforms and specialists. NAND Research lists AI runtime security from Palo Alto Networks, AI security in Cisco’s networking fabric and AI security in the Microsoft 365 and Azure stack as alternatives to Falcon Guardian. The same note says specialized AI security vendors are often more mature on prompt injection detection and that Falcon Guardian’s differentiation is weakest against them.

SecurityWeek reported that Check Point announced plans to acquire Lakera on the same day CrowdStrike announced the Pangea agreement, and tied both deals to enterprise demand for safeguarding generative AI. [s6, s22, s9, s13]

Go-to-Market & Traction Pangea’s traction evidence comes from its own homepage and from CrowdStrike…

Pangea’s traction evidence comes from its own homepage and from CrowdStrike. Pangea presents a case study in which Grand Canyon Education used its data redaction and file sanitization to keep sensitive data from backend AI models. After the acquisition, CrowdStrike announced general availability of Falcon AIDR in its fourth quarter fiscal 2026 results.

CrowdStrike reports fast growth for the product. On the August 2026 earnings call, chief executive George Kurtz said AIDR ending ARR nearly tripled versus the prior quarter. He added that one of the world’s biggest banks adopted AIDR as part of an eight-figure Falcon Flex deal, without saying how much of it was AIDR. CrowdStrike’s second quarter results also say it extended AIDR across AI gateway partners including Databricks, Google Cloud, Kong, LiteLLM and Microsoft Azure.

Those figures are the seller’s own measurements, and they come through CrowdStrike’s channel. Kurtz said CrowdStrike’s endpoint success fuels AIDR adoption, and customers enable AIDR as a license on the Falcon agent they already run. The reported growth therefore reflects CrowdStrike’s installed base as well as Pangea’s product. [s1, s21, s22, s20]

Team & Credibility Pangea was founded in 2021 by Oliver Friedrichs and Sourabh Satish, who served as CTO…

Pangea was founded in 2021 by Oliver Friedrichs and Sourabh Satish, who served as CTO. SecurityWeek reported that Friedrichs had prior exits with Immunet, acquired by Sourcefire, and the Phantom Cyber SOAR platform, acquired by Splunk. DataBreachToday reported that Friedrichs led Pangea since its inception and sold Phantom Cyber to Splunk for $350 million in April 2018.

Two in-domain exits with independent reporting are the team’s strongest signal. DataBreachToday also reported that Pangea employed roughly 40 people at the time of the CrowdStrike deal. CrowdStrike’s 10-Q attributes the purchase goodwill primarily to Pangea’s assembled workforce, planned growth in new markets and integration synergies, and it records about $46.5 million in CrowdStrike stock for certain Pangea stockholders, subject to service-based vesting. [s13, s11, s10, s6]

Trust Readiness Pangea’s own trust signals are badges on its homepage…

Pangea’s own trust signals are badges on its homepage. The homepage footer displays SOC 2 Type 2, ISO/IEC 27001 and ISO/IEC 27701 labels. Pangea’s former SOC 2 announcement address now opens CrowdStrike’s compliance page, which lists company-level SOC 2 and FedRAMP High for CrowdStrike.

CrowdStrike states the performance figures itself. CrowdStrike footnotes its 99% prompt-attack efficacy and 100-millisecond latency figures as internal benchmark results, and NAND Research ties wider adoption partly to independent tests of them. A buyer evaluating the guardrails today evaluates Falcon Guardian from CrowdStrike, since the former Prompt Guard page now opens the Falcon Guardian page. [s1, s17, s2, s9]

Competitors Lakera, Prompt Security, Lasso Security, Pillar Security, Palo Alto Networks, Cisco, Microsoft…
Company Relationship Note Compare
Lakera competes with Competes for the same buyer of runtime guardrails for AI applications.
Prompt Security competes with Competes for the same enterprise buyer of prompt-layer protection for workforce AI use and AI applications.
Lasso Security competes with Competes for the same enterprise budget for guardrails on AI use and AI applications.
Pillar Security competes with Competes where buyers want runtime protection for AI applications and agents. N/AWe captured the evidence for these companies under different evidence-model versions (v1 vs v2), so the totals were scored under different conditions and are not directly comparable.
Palo Alto Networks adjacent NAND Research lists its AI runtime security as an alternative to Falcon Guardian, the CrowdStrike product that now includes Pangea’s guardrails. N/AWe scored these companies at different scopes, so the totals measure different things.
Cisco adjacent NAND Research lists AI security in Cisco’s networking and security fabric as an alternative to Falcon Guardian. N/AWe scored these companies at different scopes, so the totals measure different things.
Microsoft adjacent NAND Research lists AI security in the Microsoft 365 and Azure stack as an alternative to Falcon Guardian. N/AMicrosoft is scored by product line, not as a whole company, so there is no company-wide column to compare. Open its profile to compare a specific product.

Add analyzed competitors to compare them side by side with Pangea.

Strategy Deep Dive

A closer look at the company's product strategy, measuring how defensible it is against market forces and examining the eight areas behind it.

Defensibility

Contested 14 /21 Contested: Defensibility of 13 to 14, the typical band, where a moat exists but is under pressure. reinforce or reposition

Pangea’s durable assets are its inline guardrails for prompts, responses and agent activity and a founder with two prior security exits. CrowdStrike acquired Pangea in September 2025 for $212.1 million in net cash and sells the guardrails inside Falcon Guardian, a separately priced Falcon module. CrowdStrike’s filing values Pangea’s developed technology at $13.2 million and attributes the goodwill to its workforce, planned growth and synergies. A customer that leaves would have to re-route its AI traffic and recreate its policies in a replacement. An analyst note lists AI runtime security from Palo Alto Networks, Cisco and Microsoft as alternatives a buyer on those stacks can use instead.

Dimension Score Rationale
Value Delivery Does the product sell software as the product, or judgment, trust, or accountability with software as the delivery mechanism. 1/3 Customers buy the guardrails as software, first as Pangea’s per-service APIs billed by data scanned and now as a separately priced Falcon module with token-based pricing (s16, s22). The customer’s team configures and runs the policies. CrowdStrike’s announced Falcon Complete managed service for Falcon Guardian is a separate CrowdStrike offering (s19), so the delivered artifact is the software itself.
Switching Cost How expensive leaving is for a customer: data portability, integrations, learned workflows, network effects, regulatory data residency. 2/3 The guardrails run inline between applications or agents and the models they call, deployed through gateways, browser plugins and in-app code (s1, s15). Leaving would mean re-routing those calls and recreating the governance policies a customer sets (s5). The integration paths are documented, and the cited record does not size the migration, which keeps it at meaningful friction from integrations and learned workflows.
Compliance Moat Whether certifications, liability acceptance, or audit trails block an easy replacement. 1/3 Pangea’s homepage displays SOC 2 Type 2, ISO/IEC 27001 and ISO/IEC 27701 badges (s1), and CrowdStrike’s compliance page lists company-level SOC 2 and FedRAMP High without naming the Pangea product (s17). Pangea’s SOC 2 and ISO certifications are attestations a funded competitor can obtain through ordinary enterprise-market preparation, so they do not block a replacement.
Problem Complexity Whether the product requires ML, optimization, real-time systems, or years of specialized expertise. 3/3 CrowdStrike documents runtime inspection of AI interactions for direct and indirect prompt injection across 200+ techniques, with detection latency of 100 milliseconds or less in internal benchmarks (s2). Pangea inspects prompts, responses and agent activity inline (s5). That is real-time detection work that takes specialized expertise to build, which places it at the top rung.
Buyer Profile Whether buyers are SMB operators, mid-market IT teams, or regulated enterprises and governments with procurement gates. 3/3 CrowdStrike said one of the world’s biggest banks adopted AIDR in an eight-figure Flex deal. It also reported deployment by a major global financial firm after a board-mandated AI security audit (s22). Those statements place regulated enterprises among the product’s buyers. Those buyers are unnamed and described by the seller, so the rung depends on CrowdStrike’s account, and Pangea’s own named case study is Grand Canyon Education (s1).
Layer Whether the product is an end-user application, a platform with application features, or infrastructure other applications depend on. 3/3 Pangea’s documentation describes security services and APIs delivered through a single framework, including login and user management and authorization for customer applications (s15). Applications that hand those functions to Pangea depend on it to run, which is the infrastructure relationship. Its AI guardrails also deploy through gateways and into applications with a few lines of code (s1). Falcon Guardian’s endpoint discovery runs on CrowdStrike’s sensor, the parent’s layer, and is not credited here (s7).
Proprietary Data, Content, or IP Whether the product accumulates datasets, content licenses, or IP that a rival cannot recreate from scratch. 1/3 No cited source names a dataset, content licence or granted patent that Pangea retains, and its prompt injection taxonomy and challenge are published openly on its homepage (s1). CrowdStrike’s 10-Q valued Pangea’s developed technology at $13.2 million and attributed the goodwill to the assembled workforce, planned growth in new markets and synergies (s6), which evidences code and a team as the acquired assets.
Strategic Market Segmentation Pangea moved from application developers to enterprise security teams…

Pangea moved from application developers to enterprise security teams. SecurityWeek reported in 2022 that Pangea planned to use its Series B to drive developer and builder adoption of security APIs. Pangea’s homepage now describes securing workforce AI use and in-house AI applications, and CrowdStrike sells the resulting product to its enterprise base.

The buyer set now includes large regulated enterprises by CrowdStrike’s account. On its August 2026 earnings call CrowdStrike said one of the world’s biggest banks adopted Falcon AI Detection and Response (AIDR) and that a major global financial firm deployed it after a board-mandated AI security audit. Pangea’s own named case study is Grand Canyon Education, so the regulated-enterprise buyers in the record are unnamed and described by the seller.

Product Capabilities & AI Advantages Pangea’s guardrails inspect AI interactions as they happen…

Pangea’s guardrails inspect AI interactions as they happen. CrowdStrike describes them catching sensitive data or malicious instructions in prompts, responses and agent activity. The Falcon Guardian page states detection of direct and indirect prompt injection across 200+ techniques and runtime redaction, encryption or blocking of sensitive data.

Pangea also publishes attack research. Its homepage presents a prompt injection taxonomy that Pangea researchers developed and a public prompt injection challenge, and CrowdStrike now publishes its own prompt injection taxonomy on the Falcon Guardian page. That work is public research, and it shows the team’s attack expertise.

The newer endpoint capabilities belong to CrowdStrike’s platform. CrowdStrike’s September 2026 release says the Falcon sensor discovers known and shadow AI agents on Windows and macOS, which extends Falcon Guardian beyond the prompt-layer controls Pangea brought.

Sales Engagement & Go-to-Market Pangea began with a self-serve developer motion and now sells through CrowdStrike…

Pangea began with a self-serve developer motion and now sells through CrowdStrike. Its documentation still invites a developer to go from creating an account to building an application in minutes. After the acquisition, CrowdStrike announced general availability of Falcon AIDR and sells it as a separately priced module on the Falcon platform.

CrowdStrike reports strong early demand in its own words. CrowdStrike said AIDR ending ARR nearly tripled versus the prior quarter, and its second quarter results list AI gateway partners for AIDR including Databricks, Google Cloud, Kong and Microsoft Azure. Pangea’s homepage presents a Grand Canyon Education case study as its own customer evidence.

Pricing Model Pangea priced its services by usage…

Pangea priced its services by usage. Its billing documentation lists pricing details per service, with AI Guard and Prompt Guard charged by data scanned, so cost follows the volume of AI traffic a customer sends through the guardrails.

CrowdStrike kept a usage basis for AIDR. CrowdStrike said AIDR has token-based pricing, with a set number of tokens scaled to the size of the customer’s environment. The product is also sold as a separate module.

Product Delivery & Operations Pangea delivers its guardrails through several integration paths…

Pangea delivers its guardrails through several integration paths. The homepage says the platform deploys via gateways, browser plugins and into applications with a few lines of code. The documentation lists SaaS, Edge and Private Cloud deployment models with in-app and API gateway integration options.

Inside CrowdStrike the controls also run on the endpoint. Falcon Guardian runs on the Falcon sensor that CrowdStrike customers already deploy, and NAND Research notes that activating it uses the sensor those customers already run.

Earning Customers' Trust Pangea’s homepage footer shows SOC 2 Type 2, ISO/IEC 27001 and ISO/IEC 27701 badges…

Pangea’s homepage footer shows SOC 2 Type 2, ISO/IEC 27001 and ISO/IEC 27701 badges. Its former SOC 2 announcement address now opens CrowdStrike’s company-level compliance page, which lists SOC 2 and FedRAMP High for CrowdStrike.

Efficacy claims rest on internal testing. CrowdStrike footnotes its 99% detection efficacy and 100-millisecond latency figures as internal benchmark results, and NAND Research ties wider adoption partly to independent tests of them.

Platform Strategy & Ecosystem Positioning Pangea’s guardrails run on the path between applications or agents and the AI models they call…

Pangea’s guardrails run on the path between applications or agents and the AI models they call. Pangea offers gateway, browser plugin and in-app integrations, and CrowdStrike’s second quarter results say AIDR now works with AI gateway partners including Databricks, Google Cloud, Kong, LiteLLM and Microsoft Azure.

Pangea now plugs into CrowdStrike’s ecosystem. CrowdStrike says Falcon Guardian’s planned AI gateway will use Falcon context about users, agents, endpoints and identities to inform policy. Falcon Guardian also exports agent telemetry into CrowdStrike’s Next-Gen SIEM. CrowdStrike labels the gateway as coming soon.

Team & Execution Capability Co-founder Oliver Friedrichs had built and sold security companies before…

Co-founder Oliver Friedrichs had built and sold security companies before. SecurityWeek reported that he scored prior exits with Immunet, acquired by Sourcefire, and the Phantom Cyber SOAR platform, acquired by Splunk. DataBreachToday reported the Phantom sale at $350 million in April 2018. Friedrichs co-founded Pangea in 2021 with CTO Sourabh Satish.

The team was small and is now inside CrowdStrike. DataBreachToday reported roughly 40 employees at the time of the deal. CrowdStrike’s 10-Q names the assembled workforce, planned growth in new markets and integration synergies as the sources of the purchase goodwill, and it records about $46.5 million in CrowdStrike stock for certain Pangea stockholders, subject to service-based vesting.

Sources

Company Detail Sources (7)
Id Source Tier Accessed
f1 Pangea: Security Guardrails for AI Applications official 2026-09-23
f2 CrowdStrike: press release announcing the agreement to acquire Pangea official 2026-09-23
f3 DataBreachToday on Pangea acquisition stating founding year press 2026-09-23
f4 Pangea: homepage footer address official 2026-09-23
f5 PR Newswire on Pangea Series B press 2026-09-23
f6 AI Defense Matrix Catalog entry other 2026-06-09
f7 AI Defense Matrix Catalog mapping other 2026-09-23
Profile Analysis Sources (18)
Id Source Tier Accessed
s1 Pangea: homepage (platform overview, case study, research, footer) official 2026-09-23
s2 CrowdStrike: Falcon Guardian product page (reached from the former Pangea Prompt Guard address) official 2026-09-23
s4 CrowdStrike: press release announcing the agreement to acquire Pangea official 2026-09-23
s5 CrowdStrike: blog post on the planned Pangea acquisition official 2026-09-23
s6 SEC EDGAR: CrowdStrike Form 10-Q for the quarter ended October 31, 2025 regulatory 2026-09-23
s7 CrowdStrike: press release introducing Falcon Guardian at Fal.Con 2026 official 2026-09-23
s9 NAND Research: analyst note on CrowdStrike Falcon Guardian (September 2, 2026) research 2026-09-23
s10 DataBreachToday: article on the CrowdStrike purchase of Pangea press 2026-09-23
s11 SecurityWeek: article on the Pangea Series A (May 17, 2022) press 2026-09-23
s12 SecurityWeek: article on the Pangea Series B press 2026-09-23
s13 SecurityWeek: article on the CrowdStrike agreement to acquire Pangea press 2026-09-23
s15 Pangea: developer documentation home official 2026-09-23
s16 Pangea: billing documentation (reached from the pricing address) official 2026-09-23
s17 CrowdStrike: compliance and certifications page (reached from the former Pangea SOC 2 announcement address) official 2026-09-23
s19 CrowdStrike: blog post introducing Falcon Guardian official 2026-09-23
s20 SEC EDGAR: CrowdStrike second quarter fiscal 2027 results, Exhibit 99.1 regulatory 2026-09-23
s21 SEC EDGAR: CrowdStrike fourth quarter fiscal 2026 results, Exhibit 99.1 regulatory 2026-09-23
s22 The Motley Fool: transcript of the CrowdStrike second quarter fiscal 2027 earnings call press 2026-09-23
Deep-Dive Sources (18)
Id Source Tier Accessed
s1 Pangea: homepage (platform overview, case study, research, footer) official 2026-09-23
s2 CrowdStrike: Falcon Guardian product page (reached from the former Pangea Prompt Guard address) official 2026-09-23
s4 CrowdStrike: press release announcing the agreement to acquire Pangea official 2026-09-23
s5 CrowdStrike: blog post on the planned Pangea acquisition official 2026-09-23
s6 SEC EDGAR: CrowdStrike Form 10-Q for the quarter ended October 31, 2025 regulatory 2026-09-23
s7 CrowdStrike: press release introducing Falcon Guardian at Fal.Con 2026 official 2026-09-23
s9 NAND Research: analyst note on CrowdStrike Falcon Guardian (September 2, 2026) research 2026-09-23
s10 DataBreachToday: article on the CrowdStrike purchase of Pangea press 2026-09-23
s11 SecurityWeek: article on the Pangea Series A (May 17, 2022) press 2026-09-23
s12 SecurityWeek: article on the Pangea Series B press 2026-09-23
s13 SecurityWeek: article on the CrowdStrike agreement to acquire Pangea press 2026-09-23
s15 Pangea: developer documentation home official 2026-09-23
s16 Pangea: billing documentation (reached from the pricing address) official 2026-09-23
s17 CrowdStrike: compliance and certifications page (reached from the former Pangea SOC 2 announcement address) official 2026-09-23
s19 CrowdStrike: blog post introducing Falcon Guardian official 2026-09-23
s20 SEC EDGAR: CrowdStrike second quarter fiscal 2027 results, Exhibit 99.1 regulatory 2026-09-23
s21 SEC EDGAR: CrowdStrike fourth quarter fiscal 2026 results, Exhibit 99.1 regulatory 2026-09-23
s22 The Motley Fool: transcript of the CrowdStrike second quarter fiscal 2027 earnings call press 2026-09-23

Disclaimer

This content is provided "as is" with no warranties.

This site is an experimental research aid created by Zeltser Security Corp. All its data gathering and analysis was performed autonomously without human review, and it can contain errors of fact, interpretation, and judgment that a human reviewer might catch.

The analyses are statements of opinion, not statements of fact. Machine analysis produced the scores, summaries, and matrix placements by weighing the public sources each page cites, and reasonable people can weigh the same sources differently. Where a page states a fact, it cites the public source and the date it was checked, and the statement is only as accurate as that source. Unless a profile expressly says otherwise, the analysis involves no hands-on testing and no independent validation of any company's products or services.

Nothing here is professional, security, legal, financial, investment, or purchasing advice, and nothing here is a recommendation to invest in, do business with, or avoid any company. Inclusion of a company is not an endorsement, and absence of a company is not a judgment about it. Reading this site creates no advisory or client relationship. Verify any detail you plan to act on against the vendor's current materials.

The content is provided "as is" and "as available," with all warranties disclaimed, express or implied, including merchantability, fitness for a particular purpose, accuracy, and non-infringement. No entry is warranted to be complete, current, or correct. Companies change, vendors update their claims, sources can be wrong, and automated analysis can misread them.

To the fullest extent permitted by law, the operator, Zeltser Security Corp, is not liable for any damages that arise from using this site or relying on its content, including direct, indirect, incidental, special, and consequential damages and lost profits, even if advised that such damages were possible. If you are dissatisfied with the site or disagree with these terms, your remedy is to stop using it.

Entries link to vendor pages, press coverage, and other external sites that Zeltser Security Corp does not control and is not responsible for. A link is not an affiliation with the destination or an endorsement of it. Product and company names and trademarks are the property of their owners, used here nominatively to identify the companies described. Short quotations from cited sources appear for identification and commentary.

Use, quotation, automated retrieval, and redistribution of the content are governed by the Terms of Use at cybercompanyprofiles.com/terms, which permit personal and internal business use with attribution and prohibit republication and resale.