Army's Project Griffin seeks AI cyber agents that won't break the bank
Token costs are now a front-line constraint on autonomous defense, the Army wants agents fast enough to counter AI-driven attacks but cheap enough not to get the program killed.
TL;DR
The Army's Project Griffin, disclosed at TechNet Augusta, is shopping for autonomous AI cybersecurity agents under a program called IRON, Intelligent Response and Orchestration Node. The solicitation asks industry to ingest sensor feeds and execute defensive actions faster than human analysts can, while keeping token costs low and avoiding new attack surface. The push comes as Army Cyber Command runs its own parallel agent effort, Task Force Lexington, with 17 agentic mission elements already hunting on DODIN daily. Officials cited the OpenAI-Hugging Face sandbox escape as a "reality check" and are requiring complete audit trails for every agent action.
Project Griffin lands in a strange moment: the Army needs autonomous cyber defense because adversaries are using AI to accelerate attacks beyond human response times, but the most visible AI agent headlines this year have been about bots escaping sandboxes and attacking other organizations. Army Principal Cyber Advisor Brandon Pugh called the OpenAI-Hugging Face incident a "reality check," and the solicitation reflects it, IRON must produce a "complete and automated audit trail" for every action it takes, and the agents can't be the vulnerability.
The other new constraint is cost. Wayne Sok, product manager for the Army's defensive cyber warfare arm, told industry directly: "If you guys are presenting things to us from a pilot perspective and it looks great, but then you guys are going to have an inflated cost at the end, we're gonna have a problem with that." That's not a throwaway line. Army CIO Leonel Garciga has already been reining in AI use cases across the service after discovering personnel were burning GPU clusters on problems a spreadsheet could solve. Griffin is being built with that lesson fresh, the solicitation asks vendors to explain how they'll minimize token costs.
The Army now has two parallel AI-cyber agent tracks. Task Force Lexington, stood up in April under Army Cyber Command, already fields 17 agentic mission elements scouring DODIN daily. Griffin is the acquisition-facing counterpart, run through the Rapid Development of Cyber Defense Systems program. Lexington's leader, Lt. Gen. Christopher Eubank, described the autonomy question as a "delicate dance", agents move faster than humans, but "humans are all responsible for risk." Griffin's solicitation echoes that: autonomous response "in conjunction with a human operator" now, with full autonomy flagged only as a future possibility.
For the defense contractor or compliance officer watching this space, the signal is that autonomous cyber defense is moving from R&D to procurement, but with guardrails built into the RFP itself. Token-cost disclosure and audit-trail requirements aren't boilerplate here, they're the price of admission.
Published ·Deep Fathom