CrowdStrike announced an agreement to acquire application security posture management (ASPM) company Bionic in September 2023, aiming to extend its cloud security platform beyond infrastructure and into the applications and services running on it. The deal is no longer pending: CrowdStrike later reported that it acquired all of Bionic on September 28, 2023. The acquisition’s strategic aim was broader visibility into application architecture and risk; the company’s original announcement does not establish Bionic’s current packaging, price, or availability.
What Bionic was intended to add
Cloud security tools can assess infrastructure—such as cloud configurations, workloads, and permissions—without necessarily showing how an application’s components connect or which deployed services handle sensitive data. CrowdStrike said Bionic would add application-level discovery and security posture management to its cloud-native application protection platform (CNAPP), linking infrastructure risk with risks in the software and services running on it.
In its September 19, 2023 announcement, CrowdStrike described Bionic as providing agentless discovery and mapping of application services, databases, microservices, third parties, APIs, and data flows. The company said this coverage could span cloud providers, hybrid environments, and on-premises deployments. It also described prioritizing application vulnerabilities and scanning serverless infrastructure, including Azure Functions and AWS Lambda. These are CrowdStrike’s descriptions of the planned capabilities, not independently verified performance results.
The distinction matters because a vulnerability found by a code or security testing tool does not, by itself, explain where the affected component sits in a live application, what depends on it, or how exposed it is. Bionic’s security researcher Jacob Garrison told CRN that organizations were “struggling to understand where the vulnerabilities — which they’re seeing in their security testing tools — actually exist.” CrowdStrike’s stated proposition was to add a map of application architecture and deployed dependencies to vulnerability information.
Quick wins for a faster PC:
Fix the driver behind crashes, sound loss and screen glitchesFind Drivers →Repair Windows errors before they cause bigger problemsFix Now →Scan for outdated or missing drivers - takes under a minuteDriver Scan →#1 Best Overall
- SonicWall TZ270W Appliance Only - No Service Subscription (02-SSC-2823) - Combines enterprise-grade firewalling with integrated 802.11ac Wave 2 Wi-Fi to deliver secure wired and wireless connectivity in one compact device for small offices and clinics.
- Blocks zero-day threats and ransomware with Capture ATP sandboxing enhanced by RTDMI, plus IPS and anti-malware scanning for layered protection.
- Eliminates the need for separate access points in smaller spaces thanks to built-in high-speed wireless that is simple to deploy and manage.
- Supports VPN, SD-WAN, and TLS 1.3 decryption to secure hybrid cloud access and remote workers while maintaining usability and performance.
- Delivers gigabit performance with up to 750,000 concurrent connections to handle growth in users, devices, and SaaS applications.
Why CrowdStrike pursued the deal
The acquisition fit CrowdStrike’s effort to broaden Falcon cloud security from protecting cloud infrastructure to understanding the applications and services deployed on it. In practical terms, infrastructure posture management can flag a risky cloud setting, while application posture management can help connect a software weakness to the production services, APIs, or data flows it may affect. Combining those views could help security teams prioritize issues by application context rather than treating each finding as an isolated alert.
CrowdStrike’s announcement positioned ASPM alongside cloud workload protection (CWP), cloud security posture management (CSPM), and cloud infrastructure entitlement management (CIEM). The intended benefit was a more connected view across those areas—not proof that a single tool eliminates application or cloud risk.
The acquisition also came as CrowdStrike emphasized growth in its cloud security business. The company reported $296 million in ending annual recurring revenue for its public-cloud modules as of July 31, 2023, up 70% year over year. That figure refers to CrowdStrike’s cloud modules, not Bionic’s revenue.
Rank #2
- XGS 118 with 1 Year Xstream Protection - Next-generation firewall appliance with Xstream Protection subscription providing zero-day defense, cloud sandboxing, email filtering, intrusion prevention, and advanced reporting, managed through Sophos Central for unified policies and reporting.
- 9 x 2.5 GE copper ports and 1 SFP fiber port, delivering up to 15.5 Gbps firewall performance for mid sized organizations.
- Zero day protection with cloud sandboxing, email filtering, and advanced reporting for full enterprise coverage.
- TLS inspection and next generation intrusion prevention block hidden threats in encrypted traffic and stop sophisticated attacks.
- Includes Xstream Protection – Advanced security bundle with zero-day protection, cloud sandboxing, email filtering, and automated threat response, providing full coverage against the most sophisticated cyberattacks.
What the deal cost—and what the filing confirms
There are two different figures in contemporary and later reporting, and they should not be treated as interchangeable. When announcing the agreement on September 19, 2023, CrowdStrike said the price would be paid predominantly in cash, with a portion in stock subject to vesting conditions. It expected the deal to close in its fiscal third quarter, subject to customary conditions.
Recommended Free Tools
CrowdStrike’s fiscal 2025 SEC filing later reported that it acquired 100% of Bionic’s equity on September 28, 2023. The filing recorded $239.0 million in cash consideration net of $25.7 million of cash acquired, plus $0.7 million in replacement equity awards attributable to pre-acquisition service. Those are filing-reported acquisition accounting amounts.
CRN reported an expected price of $350 million, attributing that estimate to multiple reports while noting that transaction terms had not been disclosed. It is a contemporary estimate, not the consideration figure reported in CrowdStrike’s SEC filing. The two numbers describe different reporting bases, so the estimate should not be presented as the confirmed purchase price.
Rank #3
- 𝐆𝐢𝐠𝐚𝐛𝐢𝐭 𝐄𝐭𝐡𝐞𝐫𝐧𝐞𝐭 𝐏𝐨𝐫𝐭𝐬 Equipped with 5x GbE ports, the MX67-HW ensures high-speed wired connections for your network devices.
- 𝐀𝐝𝐯𝐚𝐧𝐜𝐞𝐝 𝐒𝐞𝐜𝐮𝐫𝐢𝐭𝐲 Features such as content filtering, intrusion detection, and malware protection keep your network safe from threats.
- 𝐂𝐥𝐨𝐮𝐝 𝐌𝐚𝐧𝐚𝐠𝐞𝐝 Manage your network effortlessly from anywhere with intuitive cloud-based dashboard.
- 𝐒𝐃-𝐖𝐀𝐍 𝐅𝐮𝐧𝐜𝐭𝐢𝐨𝐧𝐚𝐥𝐢𝐭𝐲 Optimize WAN performance and reduce costs with intelligent SD-WAN capabilities.
- 𝐒𝐭𝐚𝐲 𝐏𝐫𝐨𝐭𝐞𝐜𝐭𝐞𝐝 𝐰𝐢𝐭𝐡 ACE With ACE first ever All-in-one Warranty SupportPlus, you can now have all your products warrantied just by purchasing off of our listings under ACE and make a claim with the same form for any manufacturer you buy off us.
What CrowdStrike said it would do with Bionic
The 2023 plan was to offer Bionic ASPM both as an independent product and as a capability integrated into Falcon Cloud Security. That describes the proposed product direction at the time of the announcement; it does not establish how the offering is packaged, priced, or made available today.
George Kurtz, CrowdStrike’s co-founder and chief executive officer, framed the broader objective this way: “We are delivering what customers need: modern protection to address cloud security risk comprehensively, through one unified platform.” Bionic CEO Idan Ninyo described the company’s application mapping concept as a “Google Maps for your Apps,” saying it was designed to show application security risk without interfering with development.
What the acquisition does—and does not—tell customers
The strategic logic is clear: CrowdStrike sought to connect cloud infrastructure security with visibility into application components and their relationships. That kind of context may help teams understand where a weakness exists in a deployed application and judge its significance. But an acquisition announcement and a later closing do not establish how well a capability performs in a particular environment or whether it is currently available as a standalone product or bundled service.
Quick Recap
- Established: CrowdStrike announced the agreement on September 19, 2023, and its SEC filing says it acquired all of Bionic on September 28, 2023.
- Company-described goal: Add application discovery, architecture mapping, vulnerability prioritization, and serverless scanning to CrowdStrike’s cloud security vision.
- Not established by the announcement: Current packaging, price, availability, or independently measured efficacy of the capabilities.
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
