IBM deployed a generative AI-powered Cybersecurity Assistant into its managed Threat Detection and Response Services in August 2024, used by IBM Consulting security analysts to speed up investigation of security alerts on behalf of enterprise clients.

Built on the watsonx AI platform, the IBM Consulting Cybersecurity Assistant performs tasks such as opening and summarizing tickets, running queries, pulling logs, explaining commands, and enriching threat intelligence. IBM's existing Threat Detection and Response (TDR) Services automatically handle up to 85% of security alerts; the new assistant targets the remaining alerts requiring human investigation. IBM reports the tool reduced alert investigation time by 48% for one client. The assistant is an internal tool used by IBM Consulting analysts, not directly accessible by end clients as a self-service product.