CrowdStrike taps Nvidia AI to speed cyber threat detection

CrowdStrike, a US cybersecurity firm, announced an expanded collaboration with Nvidia to use the Nvidia Agent Toolkit and Nvidia Nemotron models in Falcon Complete Next-Gen MDR to speed investigations and improve triage.

The integration uses Nvidia NeMo Data Designer to create synthetic training data and adds Nvidia Nemotron 3 Super support to Charlotte AI AgentWorks for custom agents.

Internal testing showed up to 5x faster investigations and over 3x higher triage accuracy using Nvidia’s Nemotron models. Fine-tuned Nemotron Nano also reached 96% accuracy generating investigation queries in Falcon LogScale.

The companies said the collaboration aims to automate high-volume Tier 1 security analysis and reduce manual triage.

The companies are integrating Nvidia’s OpenShell open-source runtime with Falcon through a Secure-by-Design AI Blueprint to address autonomous agent security.

🔗 Source: CrowdStrike

🧠 Food for thought

Implications, context, and why it matters.

NVIDIA is one piece of CrowdStrike’s larger AI security ecosystem

This partnership fits into CrowdStrike’s plan to make Falcon the main security platform for the “agentic SOC” (security operations center), where AI agents run day to day tasks 1.
CrowdStrike is also working with AWS (Amazon Web Services), Intel, Meta, and Salesforce to protect the full AI lifecycle from development through deployment 1.
For NVIDIA, CrowdStrike sits among several security partners. Cisco, Google, Microsoft Security, and TrendAI also plug into its open-source OpenShell runtime 2.
This context places Falcon in a role that can shape enterprise AI security standards. Third-party research says the market remains highly vulnerable 3.

AI agents are designed to accelerate CrowdStrike’s platform business

The work focuses on placing AI agents inside security operations. The goal is to automate workflows once handled by people, which can speed up high-volume investigations and triage with better precision 4.
This push supports CrowdStrike’s platform model by nudging customers toward more modules. Cloud, Next-Gen Identity and Next-Gen SIEM (security information and event management) brought in more than $1.9 billion in ending ARR (annual recurring revenue) as of Q4 FY2026 5.
AI agents can raise Falcon’s value by linking security signals across cloud, identity, and application modules. Customers already credit this approach with cutting noise and surfacing real threats faster 6.
The shift also tightens competition by making platform-level efficiency the main measure for AI-driven security offerings 1.