$CRWD shipped its AI security stack nine days ago with $NVDA's CEO standing on the stage next to George Kurtz. I read the three model partnership announcements side by side this morning, and the thing that stands out is which model got handed the work that never stops. At Fal.Con on 1 September, CrowdStrike launched SafeMind. An offensive model called Red Tempest finds the attack path, a defensive model called Blue Solano closes it, and the harnesses run the two against each other in a loop until nothing gets through. Blue Solano is a fine-tuned NVIDIA Nemotron 3 Super. Nemotron 3 Ultra orchestrates the defensive harness. Open weights, both of them. Huang's words on stage for Nemotron were "completely free." The next day CrowdStrike announced OpenAI, and Anthropic, and on a headline scan the three look like the same kind of news. Put them next to the product and they are three different things. GPT-5.6 Cyber arrives through the FAIRR service to assess risk and rank what to fix, with expert oversight in the loop. The Anthropic one is procurement: their customers can put part of their existing Anthropic commitments toward Falcon. No Anthropic model runs inside the product. So the closed frontier model gets called when a human asks it something, and the open model is the one running continuously. CrowdStrike's own framing of this is blunt. Frontier labs can tell a defender a risk exists. The harnesses can act on it. Cost is why. CrowdStrike says Blue Solano beats leading frontier models on accuracy at 99% lower cost, alongside 29% higher detection and 6x faster remediation. Take those carefully. They are internal evaluations, no baseline model named, no task set published, nobody outside has reproduced them. The direction is still the part that matters. Anything that has to run around the clock lives or dies on unit cost, and security is the first large AI use case where continuous is the requirement rather than a nice feature. That is also why Nemotron is free. Free model, paid compute, and the whole point of taking the per-loop cost down 99% is that you then go and run a great many more loops. Huang's own sentence in the release: cyber defense will be among the most compute-intensive applications of AI. $CRWV is in there as well, named for both training and inference. Nine days later at Goldman Sachs he was asked about cybersecurity and said the industry is getting ready to launch some products. Then: "what better way to create demand than to create a problem?" And that there are responsible ways of doing it and less attractive ways. He opened the event where those products launched. Which makes the line worth more than a gotcha would be, because he is describing a mechanism he is standing inside of. Worth holding next to the two numbers used to frame the threat at that same event, an 89% rise in AI-enabled attacks and a 27-second breakout time, both from the company selling the fix. What would change my read: CrowdStrike says the harnesses work with frontier and open source models too. If that holds up in the field, the moat is the harness and fifteen years of incident response data, and NVIDIA's seat here is a swap rather than a lock. I want to see whether the next SafeMind release still needs Nemotron specifically, or whether customers start bringing their own model and CrowdStrike keeps the margin anyway. $PANW and $NTSK have no equivalent layer yet, which is the other half of the same question.