Key Highlights

● CrowdStrike said on October 21 it is expanding its NVIDIA collaboration on AI agent security.

● Falcon Guardian integration with NVIDIA OpenShell is under way, while the Sentry integration is planned.

● Second quarter fiscal 2027 net new annual recurring revenue was a record, about $333 million.

● Total annual recurring revenue reached about $5.84 billion, up roughly 25%.

CrowdStrike (NASDAQ:CRWD), the Austin, Texas based cybersecurity company, announced on October 21 that it is widening its collaboration with NVIDIA (NASDAQ:NVDA) so that security for autonomous artificial intelligence agents reaches from the software runtime down to the chip. The news was made public at NVIDIA's GTC event and builds on a reference architecture, called OpenShell, that NVIDIA unveiled the same day.

The announcement has two parts that are easy to blur. According to the company, CrowdStrike is integrating its Falcon Guardian product, which it describes as its AI detection and response offering, with NVIDIA OpenShell now. A second step, integrating Falcon Guardian with NVIDIA Sentry for enforcement inside the silicon, is described as planned. Only the first is presented as work under way today.

What Did CrowdStrike Announce With NVIDIA at GTC?

CrowdStrike said its expanded collaboration with NVIDIA is aimed at securing autonomous artificial intelligence agents, the software programs that can plan and carry out tasks with limited human supervision. The company framed the effort as extending protection from software to silicon, meaning that monitoring and enforcement would not stop at the application layer but would reach into the hardware that runs the agents.

The release named three components. Falcon Guardian is CrowdStrike's offering for detecting and responding to threats against agents. NVIDIA OpenShell is a secure runtime platform, and CrowdStrike said it is integrating Falcon Guardian with it now. NVIDIA Sentry is the hardware-level piece, and the company said it plans to integrate Falcon Guardian with it for in-silicon enforcement.

That distinction between delivered and planned work matters for anyone reading the headline. A planned integration is a statement of intent, and timelines for hardware-level security features can shift. CrowdStrike did not give a delivery date for the Sentry integration, so any assumption about timing would be speculation.

How Would CrowdStrike Falcon Guardian Work With NVIDIA OpenShell?

According to the company, the OpenShell integration will link agent prompts, model interactions and runtime activity with the broader Falcon platform's security data. The idea is that suspicious behavior by an agent, such as an unexpected tool call or an attempt to reach data it should not touch, can be seen in the same place where endpoint, identity and cloud signals already converge.

The appeal of that approach is correlation. A single odd prompt might be harmless, but the same prompt combined with an unusual login or a new process on a server may indicate an attack. CrowdStrike's platform already ingests large volumes of telemetry across devices and workloads, and adding agent-level events extends the same data model to a new kind of asset.

The company quoted a customer, Autodesk (NASDAQ:ADSK)'s chief trust officer Sebastian Goodwin, as saying Falcon Guardian provides visibility into what the customer's agents are doing. A single customer quotation in a vendor release is not a measure of broad adoption, and the company did not disclose how many customers use the product in production.

What Is the NVIDIA Sentry Piece, and Why Is It Described as Planned?

The planned Sentry integration is meant to run on NVIDIA BlueField data processing units. These are specialized chips that sit alongside servers and handle networking and security tasks, separate from the main processor. According to the release, combining CrowdStrike's detection with out-of-band monitoring and hardware-level rule enforcement could let a system detect and contain unsafe agent behavior beyond the reach of the software runtime.

The reasoning is straightforward. If an agent or the software around it is compromised, controls that live in the same software environment may be disabled by the attacker. Controls enforced from separate hardware are harder to tamper with. Security engineers have long used this principle, and the new element is applying it to autonomous agents that act at machine speed.

Daniel Bernard, CrowdStrike's chief business officer, was quoted as saying guardrails alone will not stop an adversary. NVIDIA's vice president of enterprise, Justin Boitano, was quoted as saying the companies are working to bring comprehensive security to agents at scale. Both statements describe direction, not delivered capability, which is consistent with the company labeling the Sentry work as planned.

How Did CrowdStrike Do in Its Latest Quarterly Report?

The backdrop for the announcement is the company's second quarter of fiscal year 2027, reported on August 26 for the period ended July 31. According to coverage of the release, total revenue was about $1.47 billion, up roughly 26%, and subscription revenue was about $1.4 billion, up roughly 27%.

Net new annual recurring revenue, the measure of how much recurring business was added in the quarter, was a record of about $333 million, and total annual recurring revenue reached about $5.84 billion, up roughly 25%. Market coverage also cited record operating cash flow of about $530 million and free cash flow of about $377 million.

Guidance was raised. Full-year revenue was guided to between about $5.99 billion and $6.01 billion, with non-GAAP earnings per share between about $1.25 and $1.26. Third quarter revenue was guided to between about $1.52 billion and $1.53 billion. These are management expectations, and results could differ.

What Else Has CrowdStrike Announced Since the Quarter?

The NVIDIA news is the latest in a run of announcements. On September 29 the company said its Falcon platform became available on the OpenAI Marketplace. In mid and late September it announced recognition from independent research firms in threat intelligence and proactive security, along with a Customers' Choice designation in a Gartner (NYSE:IT) Peer Insights report on identity threat detection and response.

In early October the company said it was named a Leader in the IDC MarketScape for modern endpoint security for enterprises. In that release, CrowdStrike said its AI detection and response business had grown more than 79-fold in three quarters since launch, a figure the company attributed to its Fal.Con event. The figure is a company-reported growth multiple off a small starting base.

Also in early October, CrowdStrike, Amazon Web Services and NVIDIA said they were expanding a global cybersecurity startup accelerator, and the company said registrations for its Fal.Con Europe event were up 60% from a year earlier, with the event sold out. Vendor-issued recognition and event metrics are marketing signals as much as financial ones, and none of these items changes reported results by itself.

How Is the Agent Security Category Shaping Up for CrowdStrike?

Securing autonomous agents is a young category with many entrants. Large cybersecurity vendors, cloud providers, identity specialists and a wave of startups are all building products to monitor prompts, restrict agent permissions and detect manipulation. CrowdStrike's argument is that it already has the telemetry, the sensor footprint and the customer relationships to make agent security an extension of its platform instead of a separate product.

That argument has force, but it is untested at scale. Many organizations are still piloting agents, and security budgets for them may sit with different teams than endpoint security does. Standards for how agents authenticate, what they are permitted to do and how their actions are logged are also still forming, which means products built today may need to adapt.

The tie-up with NVIDIA gives CrowdStrike an association with the dominant supplier of the hardware that runs many agent workloads. At the same time, a close association with one hardware partner narrows the range of environments the hardware-level features can cover, and customers running on other chips or custom accelerators may not benefit from the Sentry integration.

What Did CrowdStrike Say About the Unsolicited Mini-Tender Offer?

On October 9, the company urged stock owners to reject an unsolicited mini-tender offer from an entity called Tutanota LLC. Mini-tender offers are bids for less than 5% of a company's shares, a size that lets the bidder avoid certain disclosure and procedural rules that apply to larger tender offers.

CrowdStrike's response is a routine protective step that large public companies take when such offers appear. The company is not a party to the offer and does not endorse it. The episode is not tied to the company's operations or results.

The company's release directed owners to its guidance on the matter. Nothing in the notice changes financial guidance.

What Challenges Does CrowdStrike Still Face After the Record Quarter?

The July 2024 outage tied to a faulty content update remains a reference point in customer conversations about reliability. CrowdStrike has since changed how it tests and rolls out updates, according to its public statements, but resilience is a standing question for any vendor whose software runs deep in customers' systems. The agent security push adds a new kind of dependency, since customers will rely on the product to police actions taken at machine speed.

Competition is the second challenge. Rivals in endpoint, identity, cloud and email security continue to bundle products and negotiate aggressively, and several are pursuing their own agent security offerings. Pricing pressure can slow net new additions even when the overall market is growing.

A third challenge is expectations. After a strong quarter, the next report will be compared with a higher bar. The company typically reports fiscal third quarter results in early December. Until then, announcements such as the NVIDIA collaboration are best read as signals of direction, not as results.

What Comes Next for CrowdStrike?

The near-term markers are concrete. One is whether CrowdStrike announces general availability or customer counts for Falcon Guardian on OpenShell, which would turn the delivered half of the announcement into something measurable. Another is whether the Sentry integration receives a timeline, given the hardware dependencies involved.

A further marker is the company's next quarterly report, where net new annual recurring revenue and the contribution from newer modules, including agent security and identity, will be scrutinized. Management commentary on gross retention, pricing and platform consolidation will help show whether the record quarter was a one-off or part of a trend.