Seraphic Acquisition Arms CrowdStrike for AI Browser Threats

CrowdStrike plans to purchase an enterprise browser security startup led by the longtime CEO of Walla to secure web-based access in the agentic artificial intelligence era.

See Also: Proof of Concept: Bot or Buyer? Identity Crisis in Retail

The Austin, Texas-based platform security vendor said the browser has become the new front door for productivity and risk, said Chief Business Officer Daniel Bernard. He said Silicon Valley-based Seraphic stands out for its flexibility in securing any browser without forcing users into a specific product ecosystem and its strength in areas like session shutdown and visibility into AI-enabled web activity.

“The browser has really become a very key focal point to AI adoption, and securing the browser we’ve seen over the last couple of years be an area where there’s an increasing level of enterprise interest,” he said. “What we saw with Seraphic was one of the most flexible and robust approaches on the market in terms of having the ability to be relevant and gain the visibility and have enforcement mechanisms.”

Seraphic Security, founded in 2020, employs 84 people and has been led since its inception by Ilan Yeshua, who previously spent nearly 13 years as CEO of Israeli internet portal Walla. The company in January 2025 completed a $29 million Series A funding round led by GreatPoint Ventures. CrowdStrike will pay approximately $420 million for Seraphic, and the deal is slated to close by the end of April 2026 (see: Seraphic Raises $29M to Expand Enterprise Browser Protection).

How Seraphic Differs From Traditional Browser Security

Traditional browser security technology either forces users to adopt a proprietary browser or rely on browser extensions, which Bernard said can be easily disabled or are incompatible with advanced use cases involving AI. Seraphic instead turns any web browser into a secure web environment, helping users access generative models, agentic browsers or LLM-powered services through web interfaces.

“You have another approach that is like, ‘We’ll just put a plug in the back of the browser,'” Bernard told Information Security Media Group. “It’s still easier for an adversary to unplug the plugin. The shortcoming of the extension approach is that it doesn’t really work for all these different new AI use cases.”

Seraphic stood out for its technical robustness, adaptability and ability to support various browser environments, which Bernard said makes it a strong fit for both the Falcon platform and CrowdStrike’s customer base. Combining Seraphic with SGNL – a continuous identity startup CrowdStrike agreed to buy last week for $740 million – will provide comprehensive protection across access and web environments (see: CrowdStrike Adds Real-Time Identity Control With SGNL Deal).

“This is a space we’ve watched for some time,” Bernard said. “The reason we’re talking both of these deals is not accidental. There’s a broader strategy here around rethinking both identity and access and how we deliver a whole revolutionized identity access experience in this new agentic world.”

Seraphic acts as the front door for web and AI access, providing visibility and control over sessions, while SGNL becomes the nervous system or central decision-making engine for identity governance, Bernard said. This integration enables web detection and response that allows enterprises to monitor, detect and stop malicious activity in real time, even if it originates within a browser session, Bernard said.

“Seraphic really becomes the front door of how AI is used,” he said. “It’s like a front door that lets us do EDR on the web. SGNL becomes the central control plane, or the nervous system. The enforcement capabilities over that access is where Seraphic comes into play. This is a whole new architecture that you can use to run web-based software or applications, agentic software and applications.”

How AI Agents Have Changed Browser Security

AI has shifted the user experience from simple searches to ongoing productivity conversations and interactions, often facilitated via web-based LLMs and AI agents. Agentic browsers such as Common and Atlas introduce novel vectors for data leakage, misconfigurations and malicious activity, and have transformed the browser into the primary gateway to corporate data, workflows and risks.

“The search bar, in many ways, has been replaced by an AI and LLM,” Bernard said. “The experience has gone from being a searching experience to being a productivity experience. We’re seeing a whole new class of browsers enter the space: agentic browsers. The front door has gotten a lot bigger.”

Third-party vendors often require their own portals and interfaces, which creates inefficiencies, and even when integrations work technically, they’re often not smooth in practice. In contrast, he said a first-party browser security solution means that CrowdStrike customers can manage everything from a single console, through one license and with one agent, increasing usability and reducing overhead.

“This makes it so that the customer logs into a single console, not multiple platforms, not stitched together stuff,” he said. “What we do with the Seraphic technology is we turn every and any technology into a secure browser. That well positions us, not only with the customers, but also well positions us from our technology approach, which is best of breed, wins flexibly, ease of use and ease of adoption.”

Unlike competitors like Island and Talon, Seraphic does not require enterprises to switch browsers, which means less disruption and more compatibility with existing user behavior, Bernard said. In addition, Bernard said Seraphic is unique among rivals in that it can forcibly shut down web sessions in real time, an essential control in scenarios such as employee offboarding or stopping malicious activity mid-session.

“Sometimes in these markets, the first movers aren’t really the ones that win the long-term game,” Bernard said. “We think this is the best approach for our customers and the best approach for the market at large, and it will be supercharged with the machine of CrowdStrike.”