CrowdStrike introduced CrowdStrike SafeMind today at Fal.Con 2026, marking a new era of frontier models designed specifically for cyber defenders. Developed within the CrowdStrike Cyber Superintelligence Lab, these frontier models power an agentic system that operates natively inside the CrowdStrike Falcon platform. Furthermore, CrowdStrike offers trusted standalone access to the models and harnesses through its Project QuiltWorks program. Unlike generic frontier models, SafeMind functions as an integrated, closed-loop system engineered specifically to deliver AI safety.
It combines offensive models that discover attack paths with defensive models that close those vulnerabilities. Training data stems directly from CrowdStrike Falcon sensor telemetry, representing the world’s largest pure-play cyber dataset.
Additionally, the training incorporates CrowdStrike threat intelligence, Falcon Complete MDR annotations, and fifteen years of front-line incident response experience.
Dual AI Competencies and High-Performance Infrastructure
The suite launches with two specialized frontier models to address distinct operational security requirements. First, Red Tempest serves as an offensive red team model built to emulate sophisticated AI adversaries. Second, Blue Solano operates as a defensive blue team model deploying real-world protection measures.
CrowdStrike engineered these frontier models using open NVIDIA Nemotron models in collaboration with AI design partner NVIDIA. Furthermore, CoreWeave provides its AI Cloud infrastructure to power training and real-time inference.
SafeMind harnesses both models within a continuous closed-loop feedback system. Consequently, the models pit against each other continuously to sharpen capabilities over time.
The system also integrates seamlessly with external frontier models and open-source options to optimize costs. While standard labs identify risks, CrowdStrike harnesses AI to take defensive action autonomously.
“The future of cybersecurity won’t be defined by AI that simply identifies threats, it will be defined by AI that defeats them,” said George Kurtz, CEO and founder of CrowdStrike. “SafeMind brings offensive and defensive models together in a system trained on CrowdStrike’s unique cyber data. It finds weaknesses, strengthens protection, and gets smarter with every cycle, advancing our mission to stop breaches at machine speed.”
“Cybersecurity in the age of AI will be a continuous contest between adversaries using AI to scale attacks and defenders using AI to expand detection and response. Cyber defense will be among the most compute-intensive applications of AI,” said Jensen Huang, founder and CEO of NVIDIA. “SafeMind combines NVIDIA Nemotron open models with CrowdStrike’s deep cybersecurity expertise, trusted security data, purpose-built agent harnesses, rigorous evaluations, and safeguards – creating a frontier agentic cybersecurity stack designed to operate at machine speed. Powered by NVIDIA accelerated computing, SafeMind makes AI a force multiplier for defenders.”
“The real test of AI is what it can do in production, at scale, when the stakes are highest. Few environments put that to the test more than cybersecurity,” said Michael Intrator, co-founder and chief executive officer, CoreWeave. “We’re proud to power SafeMind across training and inference as CrowdStrike puts specialized AI to work against real-world threats.”
Proven Performance Metrics and Operational Advantages
Independent evaluations highlight significant performance gains over leading market baselines. Specifically, SafeMind delivers a 29% higher detection rate alongside 6x faster end-to-end remediation. Furthermore, the architecture achieves a dramatic 99% cost reduction compared to generic frontier models.
“Our models are the start of a new chapter for cyberdefense,” said Dr. Bartley Richardson, chief AI and autonomous systems officer at CrowdStrike. “With the models and harnesses together in a co-evolving agentic system, defenders can now act at machine speed. This is the foundation for the next decade of AI security, and CrowdStrike is the only company that owns the entire stack, from sensor to harness to model.”
By deploying custom frontier models, enterprise organizations gain unprecedented speed and protection against AI-driven threats.
For related updates on digital trust and cybersecurity, explore our SOC News.
News Source: Businesswire
