The Agentic SOC Alliance, for example, is a coalition of 15 cybersecurity vendors founded in July.

A recent lab exercise at ExtraHop illustrates the real-world need for multi-model flexibility, according to Paul Giorgi, vice president of global engineering.

Bypassing third-party guardrails with open-weight models While multi-model routing offers operational flexibility, other vendors are taking model control a step further by building directly on open-weight foundations.

CrowdStrike -- a member of the Agentic SOC Alliance, along with ExtraHop -- recently debuted SafeMind, an agentic harness-model system with complementary red-team and blue-team capabilities.

As vendors balance multi-model frameworks with specialized open-weight deployments, resilience is likely to hinge on keeping AI execution layers fluid and adaptable.