Fujitsu Launches a Frontier-AI Cyber Incident Investigation Service in Japan, With Engineers Checking Every Report

Fujitsu began offering a service in Japan on October 30 that uses frontier AI models to investigate cyberattacks and then has its own engineers check the findings before a report goes to the customer, IT Leaders reported on November 2. The service targets the first hours after an incident, when companies need to understand the cause and scope of the damage quickly in order to decide how to respond.

Customers upload suspicious files or data from affected devices to a dedicated portal that accepts submissions 24 hours a day, 365 days a year. The AI system then runs two kinds of analysis: forensic investigation, which looks for traces of intrusion and the extent of damage on devices, and threat analysis, which examines malware and suspicious URLs. Fujitsu engineers verify the results and fill in gaps where needed. The company says threat analysis reports can be delivered in as little as one business day and forensic reports in as little as two.

If the analysis shows that an incident is widespread or needs urgent work, Fujitsu’s incident response team steps in to assess the situation, carry out triage and log investigations, and propose and implement measures to contain the damage and restore systems. Engineer support up to a set number of hours is included in the base fee, with extra hours available. When several cases arrive at once, specialists decide which ones to prioritise.

What it means in practice

Fujitsu Launches a Frontier-AI Cyber Incident Investigation Service in Japan, With Engineers Checking Every Report — contextual photo

The offer addresses a familiar problem for Japanese companies: forensic specialists are scarce and expensive, and waiting days for an outside investigator can let an attack spread. Putting AI at the front of the process while keeping people responsible for the conclusions follows a pattern seen at other domestic providers, such as NTT and SoftBank’s in-Japan AI cybersecurity services that keep data local. It also reflects a wider worry in the industry that the same advanced models defenders rely on can help attackers move faster, which pushes vendors to shorten response times.

The announcement did not give prices or name early customers. What to watch is how reliable the AI findings prove in real incidents, where uploaded data is processed and stored, and whether smaller firms without in-house security teams find the service affordable.