CrowdStrike SafeMind Pairs NVIDIA Nemotron With Falcon
At Fal.Con 2026 the two companies showed a defense stack where red-team and blue-team agents keep sharpening each other inside Falcon.
Illustration: two facing rows of server cabinets in a darkened hall, one row lit cool blue, the other warm amber, with a single narrow aisle between them.
CrowdStrike and NVIDIA used Fal.Con 2026 in Las Vegas to launch SafeMind, an agentic security system whose defensive models are post-trained from NVIDIA's open Nemotron family and ship natively inside the Falcon platform.
At a glance
- SafeMind comes out of CrowdStrike's Cyber Superintelligence Lab and ships natively in the Falcon platform.
- The Blue Solano model is built on Nemotron 3 Super; NVIDIA claims 99 percent lower cost at higher accuracy.
- NVIDIA puts the past year's rise in AI-enabled attacks at 89 percent and the fastest breakout time at 27 seconds.
- Falcon IQ coordinates more than 50 agents inside Charlotte AI AgentWorks, CrowdStrike's no-code agent environment.
- Testing ran in simulation against a digital twin of NVIDIA's own corporate network.
CrowdStrike and NVIDIA announced a joint defense system called SafeMind at Fal.Con 2026, CrowdStrike's own conference in Las Vegas. It comes from the vendor's Cyber Superintelligence Lab, pairs CrowdStrike's in-house security models with defensive models derived from NVIDIA's open Nemotron family, and is wired into the Falcon platform. NVIDIA CEO Jensen Huang shared the stage with CrowdStrike founder George Kurtz in front of roughly 10,000 security professionals.
Offense and defense in one loop
The technical claim at the center is a loop NVIDIA calls coevolution: one set of agents hunts for exploits, another closes them, and each side keeps training against the other's behavior. NVIDIA says the defensive models were post-trained on CrowdStrike's threat data without that data leaving for an outside provider.
Huang framed the design around automation on the other side — attacks now run by machine, so defense has to as well. Kurtz put the gap he saw more bluntly: attackers had frontier AI and defenders did not.
On the harness — the software layer that turns a model into something that can act — Huang offered an image: the model is the brain, the harness the exoskeleton that makes it an agent. Security teams can also pair CrowdStrike's harnesses with models of their own, according to the post.
Blue Solano and the 99 percent claim
The one named model is Blue Solano, which CrowdStrike built on top of Nemotron 3 Super. It is said to beat leading frontier models on accuracy while costing 99 percent less. Nemotron 3 Ultra also gets a mention.
How that cost figure was derived, which models it was measured against, and on which tasks are all absent from the announcement. NVIDIA says the evaluation ran in simulation against a digital twin of its own corporate network.
What else shipped
Alongside SafeMind, CrowdStrike announced Falcon IQ, which turns an unexplained “Project QuiltWorks” into automated agentic workloads; NVIDIA describes more than 50 agents operating there as a single workforce. Falcon IQ runs inside Charlotte AI AgentWorks, the company's no-code environment for assembling agent teams. An expansion of the Guardian AI safety layer rounds out the list, though the post does not say what it now covers.
Two figures carry the market argument: AI-enabled attacks up 89 percent over the past year, and a fastest observed breakout time of 27 seconds — the window in which an intruder moves off the first machine.
What this report does not establish
This story rests on a single source: NVIDIA's blog post, written by one of the two parties to the announcement. It contains no pricing, no availability date, no licensing terms for SafeMind, and no independent measurements.
Three things therefore remain unconfirmed: the Blue Solano cost claim, what Project QuiltWorks actually is, and where the two threat figures come from. We will update once a second, independent newsroom has checked them.
FAQ
What is CrowdStrike SafeMind?
An agentic security system from CrowdStrike's Cyber Superintelligence Lab. Offensive and defensive agents run against each other in a coevolution loop; the defensive models are post-trained from NVIDIA's open Nemotron models on CrowdStrike's threat data, and SafeMind ships inside the Falcon platform.
What is Blue Solano built on?
Blue Solano is CrowdStrike's model, built on Nemotron 3 Super, an open model from NVIDIA. NVIDIA states it delivers higher accuracy than leading frontier models at 99 percent lower cost. The announcement does not name the comparison models or describe the measurement.
When can customers get SafeMind and what does it cost?
No figures have been published. The announcement says only that SafeMind ships natively in the Falcon platform; price, launch date, and licensing terms are not stated. We will add them when CrowdStrike releases them.
