Frontier AI for Defenders: CrowdStrike and OpenAI TAC

April 16, 2026

| | Executive Viewpoint

CrowdStrike has been selected for OpenAI's Trusted Access for Cyber (TAC) program. Today, OpenAI released GPT-5.4-Cyber, a frontier model designed for defensive cybersecurity, and expanded the TAC program to give verified, selected defenders governed access through identity verification and tiered controls. 

CrowdStrike continues to lead the market in secure AI adoption, trusted by AI leaders and organizations of all sizes to accelerate the world's AI revolution.

OpenAI Selects CrowdStrike

OpenAI models are already in use across the CrowdStrike Falcon® platform. AgentWorks, CrowdStrike's agentic AI framework, is multi-model by design. As enterprises deploying AI have learned over the last two years, different models excel in different security tasks. AgentWorks lets defenders choose the right model for each task while delivering enterprise-grade governance.

The CrowdStrike 2026 Global Threat Report documented the fastest eCrime breakout time at 27 seconds in 2025. Attack automation is compressing timelines that defenders built their programs around. As frontier models reach production, the volume of findings they generate will outpace what human teams can process manually. The priority extends well beyond finding more vulnerabilities to understanding which exposures are actually exploitable in the enterprise. CrowdStrike tracks 280+ adversary groups, generating real-world attack data that determines which vulnerabilities matter most. That intelligence is what turns a model's output into a decision.

Securing AI Everywhere It Operates

Enterprise AI in production requires visibility, detection, and response capabilities in place. AI agents access production data, execute code, and interact with live systems inside the enterprise. They often inherit user permissions and take process-level actions on enterprise workstations, creating a governance challenge for the enterprise. CrowdStrike solves it by protecting organizations where AI actually executes: at the endpoint — the data layer — in runtime. 

The Falcon sensor observes what AI agents actually do: commands executed, files accessed, network connections initiated, processes spawned. With visibility into more than 1,800 distinct AI applications and nearly 160 million unique application instances, CrowdStrike governs and protects AI agents at the point where they execute.

The EU AI Act's next phase takes effect August 2, 2026. Governance is no longer optional. Enterprises deploying frontier AI need the technical infrastructure to comply.

Looking Ahead

Frontier labs drive AI innovation. CrowdStrike delivers the intelligence, protection, and governance to put it to work. OpenAI’s TAC gives CrowdStrike direct access to these capabilities, coupling them with proprietary threat intelligence and enforcement that only CrowdStrike has. 

As frontier AI advances across multiple labs simultaneously, CrowdStrike customers and partners benefit from all of it, inside the very platform they already trust to stop breaches.