NEC launches AI-driven managed vulnerability service

NEC's announcement reflects a broader push to apply frontier AI models to cybersecurity operations, a field traditionally dependent on manual analysis by experts. By partnering with major AI vendors like Anthropic, OpenAI, and Google, NEC aims to augment its proprietary security technology with external innovation. The company's plan to evolve toward autonomous AI agents for vulnerability response signals a long-term strategic direction, though the current services still combine AI with human expert verification.

The service structure shows a phased approach: initial offerings focus on visualization, triage suggestions, and defense planning. NEC has scheduled expansions for the second half of 2026, including faster detection-to-response processes and automated defense measures, with further advanced managed services planned from fiscal 2027 onward. The use of CISA's BOD 26-04 framework for triage and the inclusion of Pre-CVE information, which covers vulnerabilities not yet assigned a CVE identifier, indicates an intent to move beyond conventional CVE-based response methods. The projected ¥30 billion in sales over three years suggests NEC sees managed security services as a significant growth area.