Security research and technical insights

Security in the Age of AI

NVIDIA advances AI security by helping defenders apply AI and helping organizations create safer AI systems.

Research and technical insights

How does NVIDIA approach AI security?

NVIDIA helps shift the asymmetric advantage toward defenders by sharing frontier security research openly, enabling the community to pool knowledge, resources, and expertise.

Transparent Insights

Make AI security research open to inspection, adaptation, and validation across models, to enable stronger protections across the full AI stack.

Reproducible Results

Develop repeatable methods, clear benchmarks, and research artifacts so teams can validate findings and build on them.

Practical Security

Produce actionable security research to drive vulnerability discovery, disclosure, remediation, and prevention to help defenders manage real-world risk.

Published work

AI security contributions

Blog

NVIDIA Open Agent Safety Platform: A Reference for Continuous In-Silicon Agent Monitoring

To understand where agentic AI stands today, consider the last seismic shift in technology: the rise of the internet in the 90s. It was new and full of possibilities.
Blog

Add Runtime Controls to AI Agents with NVIDIA OpenShell

AI agents can be given a goal, write code, use tools, and keep working as new information becomes available. This opens the door to applications that investigate software failures, run experiments, and carry out business-critical actions and research over days or weeks.
Blog

Enabling Private High-Performance Production AI Inference with NVIDIA Confidential Computing

As large language model (LLM) inference increasingly processes sensitive information and proprietary model context across personal, enterprise, and regulated settings, data must be processed inside a trusted environment. NVIDIA Confidential Computing (CC) provides a pathway for running these workloads securely using memory-encrypted confidential virtual machines (CVMs), confidential GPUs, and encrypted NVIDIA NVLink.
Blog

When Modalities Combine: The Combinatorial Blind Spot in AI Security

Prompt injection used to be a problem about a single input. Defenders inspected a string, or an image, or an audio clip, and asked whether that single channel carried a malicious instruction. Multimodal models break that assumption.
Blog

AI Security Is an Engineering Problem — How to Solve It at Every Layer of the Agent Stack

AI security is an engineering problem. That means defined security requirements, enforceable controls, named owners and evidence that protections work.
Research PaperSep 15, 2026

ShareMMU: Supporting Secure Address Translation Sharing among Untrusted Accelerators

The growing demand for accelerated computing is driving widespread deployment of multi-accelerator systems in the cloud and at the edge.
Research Paper

Onyx: Cost-Efficient Disk-Oblivious ANN Search

Approximate nearest neighbor (ANN) search in AI systems increasingly handles sensitive data on third-party infrastructure.
Blog

NVIDIA and CrowdStrike Strengthen Agentic Cybersecurity Frontier

“We’re at an inflection point in cybersecurity,” Jensen Huang told a sold-out crowd at CrowdStrike’s Fal.Con 2026 in Las Vegas Tuesday. Attacks are now automated.
Blog

Building an Adaptive Agentic Cybersecurity System with NVIDIA Nemotron

AI is changing the pace of cybersecurity. Agentic systems can coordinate work and pursue complex objectives over long horizons.
Blog

NVIDIA AVO Reaches 100% on ARC-AGI-3, Demonstrating a Frontier-Level General-Purpose Architecture for Long-Horizon Autonomous Agents

A frontier language model is only one component of an AI agent. The surrounding agent system—often called a harness—determines how the model receives context, uses tools, maintains state, responds to feedback, recovers from failure, and sustains progress over long-running tasks.
See more
Creating an asymmetric advantage through community

The Open Secure AI Alliance unites a community of security experts working together to keep the world safe.

FAQs

Why does NVIDIA share AI security research openly?

AI security is a collective challenge. NVIDIA shares research, methods, and technical artifacts so defenders can inspect findings, build on them, and help strengthen protections across the ecosystem.

NVIDIA is an active contributor to the Open Secure AI Alliance, managed by the Linux Foundation, which provides a community for security teams to collaborate on this work. Learn more.

What does NVIDIA contribute to AI security?

NVIDIA AI security research studies how AI systems can be secured and how AI can help defenders. The work spans open systems, reproducible cyber evaluation, red teaming, runtime controls, human accountability, plus vulnerability discovery, reporting, and remediation.

What security topics does this page cover?

This collection covers AI agent security, prompt injection, offensive and defensive cybersecurity, vulnerability discovery and remediation, model-weight security, safety evaluation, multimodal attacks, observability, and governed deployment. It also connects this research to real-world cyber defense and secure AI infrastructure.

What makes AI security insights useful to practitioners?

Useful research defines the security problem, documents the method, states limitations, and provides evidence others can inspect, test, or reproduce. NVIDIA AI Security prioritizes practical work that helps teams evaluate AI systems and apply findings to stronger defenses.

Where can I find published NVIDIA Research papers?

Find published papers in the NVIDIA Research publications directory. Individual security-research entries should also link directly to their paper, technical blog, code, data, or other public primary source.

Where can I find information about NVIDIA technologies for AI security?

Explore NVIDIA cybersecurity AI technologies, including open AI models and libraries, secure infrastructure, and reference examples.