Claw & Talon

Dossier · Acquired asset · 1 independent source

Adaptive Shield

Cybersecurity Acquired asset Dual-Use Technology Founded 2019

Last updated: Jul 31, 2026

Adaptive Shield developed an agentless SaaS Security Posture Management (SSPM) and SaaS identity-security platform. CrowdStrike acquired the company in November 2024 and now markets the technology as Falcon Shield, protecting SaaS configurations, identities, connected applications, data exposure, and activity.

Visit Website

Company Overview

Adaptive Shield was an Israel-founded cybersecurity company focused on the security controls that live inside business SaaS applications rather than on the endpoint or network. Its technology connected to applications through APIs and OAuth, inventoried users, privileged roles, devices, connected applications, permissions, and exposed data, and evaluated native configuration controls against security checks and compliance-oriented policies. The product was designed to be agentless, which is important for SaaS environments where customers generally cannot install a traditional sensor in the provider's infrastructure. Current CrowdStrike materials describe the successor Falcon Shield offering as covering more than 200 SaaS applications, with more than 3,500 built-in hardening checks and support for custom checks.

The commercial problem is persistent and specific: SaaS providers expose security settings and identity relationships, but responsibility for configuring and monitoring those controls remains with the customer. Falcon Shield addresses weak MFA or SSO settings, excessive privileges, public or over-shared data, dormant and partially deprovisioned users, risky third-party applications, and suspicious activity across connected SaaS services. It combines posture scoring and historical reporting with remediation guidance, role-based access for application owners, configurable reports, and policy-based actions such as revoking or blocking risky connected applications. This places it alongside SSPM, SaaS identity threat detection and response, CASB, identity governance, and security operations products rather than making it a general-purpose endpoint tool.

Market evidence is stronger for the integrated product than for an independently operating startup. CrowdStrike publicly announced the acquisition on November 6, 2024, and its regulatory filing records the acquisition of 100% of A.S. Adaptive Shield Ltd. on November 20, 2024. CrowdStrike's current product pages, trial workflow, customer stories, and analyst-material references show continued commercialization under the Falcon brand. They also indicate an expanding scope around non-human identities, AI agents, SaaS-to-SaaS and device interactions, and automated response. Those claims establish active product investment and distribution, but they do not independently verify renewal rates, standalone Adaptive Shield revenue, customer concentration, or the effectiveness of every automated action.

The defense and national-security case is credible but enabling. Military, government, and defense-industrial organizations increasingly use collaboration, identity, development, and workflow SaaS for administrative and mission-support functions. Continuous checks can reduce accidental exposure, privilege sprawl, shadow applications, and lateral movement through compromised SaaS identities; activity monitoring can add context to investigations that endpoint telemetry cannot see. The technology is not a weapons system and does not itself provide offensive capability, classified-cloud authorization, or mission assurance. Its value depends on the customer's SaaS authorization boundary, data residency, identity architecture, connector permissions, incident-response process, and ability to operate the product in an environment meeting the relevant accreditation requirements.

Dual-Use Assessment

Military & Commercial Applications

SSPM has substantive commercial and security applicability because the same SaaS identity, configuration, connected-application, and data-exposure risks affect enterprises and government or defense organizations. The defense relevance is strongest for mission-support and contractor workflows that use commercial SaaS; it is an enabling control, not a uniquely military capability, and public evidence does not establish classified deployment or government accreditation.

Strategic Fit Assessment

Adaptive Shield is no longer an independent direct-diligence target: CrowdStrike's filing records a 100% acquisition that closed on November 20, 2024. The relevant diligence question is strategic capability and execution inside Falcon, not startup financing or standalone strategic relevance. Public materials support continued commercialization, but do not establish independent revenue, retention, margins, or government accreditation.

Strategic Value to U.S.-Israel Alliance

The asset extends CrowdStrike's endpoint, identity, cloud, and security-operations coverage into SaaS-native control planes. It can give security teams a common view of misconfiguration, identity, connected-app, device, and activity risk, with particular value for organizations whose business or mission-support workflows depend on Microsoft 365, Google Workspace, Salesforce, Atlassian, GitHub, Slack, and similar services. Strategic value is reduced where SaaS is prohibited, isolated, self-hosted, or subject to accreditation and residency constraints that the public product materials do not resolve.

Key Technologies

  • Agentless SaaS API and OAuth connectors across 200+ business applications
  • Continuous configuration assessment with 3,500+ built-in and custom security checks
  • Human and non-human identity, privilege, role, and entitlement inventory
  • Connected-application, OAuth-scope, shadow-SaaS, and AI-agent discovery
  • SaaS activity monitoring, anomaly context, and threat detection
  • Policy-based remediation, access revocation, RBAC, reporting, and compliance mapping

Use Cases & Applications

  • Find and prioritize weak MFA, SSO, sharing, public-site, and other SaaS configuration controls
  • Inventory privileged, dormant, external, and partially deprovisioned SaaS users
  • Identify over-permissioned OAuth apps and revoke or block risky connected applications
  • Track SaaS posture over time and produce evidence for security and compliance reviews
  • Investigate suspicious user, application, device, and SaaS-to-SaaS activity
  • Reduce data-exposure and lateral-movement paths in collaboration and development platforms
  • Harden government, defense-contractor, and coalition mission-support SaaS environments where authorized

Sources and verification

This profile is based on public-source research, Claw & Talon curation, and editorial judgment. Inclusion does not imply endorsement, partnership, investment, or a recommendation to transact. Readers should still confirm current status, customers, funding, and product claims before relying on this profile. The editorial policy explains how profiles are researched, where automated drafting is used, and how corrections work; the research methodology documents how evidence is graded, what counts as an independent source, and why some profiles are excluded from search indexing.

This record lists 5 public references used for company identity, status, positioning, or material-claim review.

Public sources

The links below are visible public references used for source discipline around company identity, status, funding, customer, acquisition, public-company, or other material claims where available.

Related sector

See the Cybersecurity sector page for market context, related subcategories, and other Israeli companies in this part of the database.

Related companies

Wiz Cybersecurity Irregular Cybersecurity Sweet Security Cybersecurity Zafran Security Cybersecurity Cyera Cybersecurity