Uravation launches 6-hour AI-agent patch response training

Uravation is framing the training around a concrete day: the emergency PHP release of 2026年10月21日, which fixed two vulnerabilities. According to the company, the IPA called on the same day, before publication, for organizations to inventory where PHP is used, noting it can sit inside software products and network equipment. That is the scenario the course replays.

The exercises separate five stages: reading the official advisory, listing where the software runs and who updates it, approving production changes, applying updates one machine at a time, and confirming and recording the result. The company says it applied the update to its own servers about an hour after release, with its representative approving the scope of production changes — and that this day is used as the training exercise.

Uravation also sets six rules for delegation, including approval before production changes, read-only permissions for summarization work, keeping passwords and API keys out of prompts and logs, and human review of any message sent to business partners. The course explicitly excludes security diagnosis, monitoring and incident recovery.