CrowdStrike and NVIDIA extend AI agent security from software to silicon, integrating Falcon Guardian with NVIDIA OpenShell and planning chip level enforcement
AI agents need more than guardrails. CrowdStrike and @NVIDIAAI are extending AI agent security from software to silicon. Announced at #NVIDIAGTC Berlin: Falcon Guardian is being integrated with NVIDIA OpenShell, with plans for in-silicon enforcement through NVIDIA Sentry. 馃敆 Learn more:
Context
As companies give agents more access, security vendors are moving controls deeper into the hardware that runs them.
CrowdStrike is a cybersecurity company, and Falcon Guardian is its AI detection and response product. NVIDIA announced the OpenShell Reference Architecture for running AI agents under control at its GTC Berlin conference the same day.
Deep dive
On October 21, CrowdStrike posted that AI agents need more than guardrails, and that it and NVIDIA are extending AI agent security from software to silicon. It said that, as announced at NVIDIA GTC Berlin, Falcon Guardian is being integrated with NVIDIA OpenShell, with plans for in silicon enforcement through NVIDIA Sentry.
CrowdStrike's press release says the OpenShell integration will connect agent prompts, model interactions and runtime activity with security data from its Falcon platform, to help detect malicious behavior across agent workflows. A planned integration with NVIDIA Sentry on BlueField 4 data processing units would add monitoring outside the main system and policy enforcement in the chip, to contain unsafe agent behavior beyond the software runtime.
Daniel Bernard, CrowdStrike's chief business officer, said guardrails alone will not stop an adversary. NVIDIA's Justin Boitano said OpenShell provides the foundation for runtime security and hardware based enforcement. Autodesk's chief trust officer said Falcon Guardian gives it visibility into what its agents are doing and when to intervene.
The Sentry integration is a plan, and neither company gave a date for it. Walter Bloomberg's earlier headline on the news tagged it with the ticker CRWV, which belongs to CoreWeave, rather than CrowdStrike's CRWD.
What to expect next
Watch for a date when the NVIDIA Sentry integration ships and for which customers adopt chip level enforcement for agents. Other security vendors may announce their own OpenShell integrations. Also watch for evidence that hardware controls stop real attacks on agents, which CrowdStrike says threat actors are already using in intrusions. Pricing and availability details from CrowdStrike would also show how broadly the integration is offered, and whether it extends beyond BlueField 4 hardware.