CrowdStrike launched SafeMind on 1 September, a pair of security models named Red Tempest and Blue Solano. Red Tempest plays the intruder while Blue Solano writes detections, and then the loop repeats. CrowdStrike built both on Nvidia's open Nemotron models and trained them on its own breach data.