The creators of Phantom SOAR built AI security as a developer API — and CrowdStrike paid $260 million to make it the foundation of enterprise AI Detection and Response.
pangea.cloud ↗Pangea was founded in 2021 by Oliver Friedrichs and Sourabh Satish — the same team that built Phantom Cyber, the SOAR platform acquired by Splunk in 2018. Headquartered in Palo Alto, Pangea took a developer-first approach to security, offering security capabilities as API microservices that software builders could embed into applications without building security infrastructure themselves. The company raised $52 million across a Series A ($25M, Ballistic Ventures) and Series B ($26M, GV/Google Ventures, Decibel, Okta Ventures) before pivoting its focus toward AI application security with the launch of AI Guard and Prompt Guard.
CrowdStrike announced the acquisition of Pangea at its Fal.Con 2025 conference on September 15, 2025, in a deal valued at approximately $260 million. The acquisition closed in Q4 2025. The strategic rationale was explicit: CrowdStrike used Pangea's technology to launch Falcon AI Detection and Response (AIDR), which it positioned as 'the industry's first complete AIDR platform,' securing data, models, agents, identities, infrastructure, and interactions across the AI lifecycle. Pangea's technology became the technical foundation for CrowdStrike's new AI security category.
Pangea's core AI security products — AI Guard (sensitive data leakage prevention and malicious content filtering) and Prompt Guard (jailbreak and prompt injection blocking with 99%+ efficacy at sub-30ms latency) — were built on top of Pangea's existing Security-as-a-Service infrastructure, which included audit logging, secrets management, PII redaction, and threat intelligence partnerships with CrowdStrike, DomainTools, and ReversingLabs. The developer SDK model meant Pangea's guardrails could be embedded into applications with minimal code — a critical advantage for enterprises building AI products at speed.
Pangea's acquisition validates the Security-as-a-Service architecture as the right model for AI security at scale. By building security as composable, embeddable API services rather than a standalone product, Friedrichs and Satish built something CrowdStrike needed architecturally — not just commercially. The result is Falcon AIDR, a unified platform that brings CrowdStrike's existing telemetry, identity, and endpoint data to bear on AI security decisions, creating a cross-domain correlation capability no standalone AI security startup can replicate. For enterprises already in the CrowdStrike ecosystem, AIDR is the obvious choice precisely because it requires no new vendor relationship. Pangea's exit also confirms that developer-first AI security — where security is embedded at build time, not bolted on after deployment — is how the market will ultimately be won.
Post-acquisition, Pangea's technology lives inside the Falcon platform, competing directly against Check Point's Lakera integration and SentinelOne's Prompt Security acquisition. CrowdStrike's advantage is the broadest enterprise telemetry base in the industry — AIDR can correlate AI security events with endpoint, identity, cloud, and network data in a single console, which no standalone competitor can offer. The developer SDK model also means Pangea's guardrails can be embedded earlier in the software development lifecycle, creating stickier relationships than runtime-only solutions. The integration challenge is maintaining the agility and developer-friendliness that made Pangea's API-first approach distinctive within CrowdStrike's enterprise sales motion.
206 companies across 10 categories — the most comprehensive AI security company tracker.
Browse All Companies →