CrowdStrike Plans NVIDIA Hardware Controls for AI Agents

CrowdStrike is integrating Falcon Guardian with NVIDIA’s OpenShell runtime and plans a separate BlueField-4 hardware link that would give enterprises another way to monitor and restrict AI agents.

The two connections are at different stages. Work on the OpenShell integration is in progress, while the link to NVIDIA Sentry remains planned. The OpenShell reference architecture is already available.

OpenShell sets boundaries on what an AI agent can access while it runs. Connecting it to Falcon Guardian is intended to bring prompts, model interactions and runtime activity into CrowdStrike’s broader view of enterprise threats. That would put agent behavior alongside the security activity CrowdStrike already tracks.

Sentry is designed to inspect network requests and selected host memory from BlueField-4 data processing units. Because that hardware operates separately from the software running an agent, the planned connection would allow monitoring and policy enforcement outside the agent’s host environment. Sentry is designed to apply access rules even if host software is compromised.

That distinction affects when enterprises could use the proposed controls. OpenShell provides a software runtime today, but the additional hardware layer depends on Sentry and BlueField-4. CrowdStrike has not presented the Falcon Guardian–Sentry connection as a finished product.

The work extends a CrowdStrike and NVIDIA security blueprint announced March 16. NVIDIA followed with its Open Agent Safety Platform on Sept. 28, describing an approach to agent monitoring across software and hardware. CrowdStrike already brings telemetry from NVIDIA’s DOCA Argus into its Falcon security platform.

Other companies are also building support for OpenShell. Separately, ServiceNow has outlined AI agent permission controls using NVIDIA platform components. Its work addresses what an agent may do while it runs, another part of the broader effort to control autonomous software in enterprise systems.

“AI agents have already created a new attack surface, and guardrails alone won't stop an adversary,” said CrowdStrike Chief Business Officer Daniel Bernard.

NVIDIA plans to make Sentry available in early 2027. CrowdStrike has not specified when it expects to deliver its Sentry integration.