KDDI launches AI脆弱性管理ソリューション with LAC, KDDI Research

The offering combines KDDI's experience designing, building and operating corporate networks with LAC's security diagnostics—built over more than 30 years—and KDDI Research's AI and security technology. LAC's intrusion-path diagnostic examines internet-facing systems and network boundaries from an attacker's perspective, checking exposed assets and ports to visualize where an external attack could enter.

The network config diagnostic uses AI reflecting KDDI's design and operational knowledge to parse firewall and other settings, automatically extracting issues such as excessive communication permissions or missing multi-factor authentication. It checks device and OS vulnerabilities, End of Life and End of Support status, account settings and access controls, then has experts review the AI's findings and propose improvements alongside a diagnostic report.

The software diagnostic uses multiple AI agents built on frontier AI to analyze source code, drawing on a proprietary control framework (patent pending) that fuses KDDI Research's Cyber Intelligence Laboratory security knowledge with AI analysis. It also uses the latest cyber threat intelligence and the U.S. CISA's BOD 26-04 vulnerability response guidance to prioritize vulnerabilities with high exploitation risk, automating triage that previously took significant manual time.