On November 3, 2026, Cisco outlined how it is integrating the company’s network telemetry with OpenAI models to accelerate detection, investigation and remediation of security incidents. Cisco says the approach aims to help defenders respond at “machine speed” as adversaries use AI to scale automated attacks.
Network-level controls and distributed enforcement
Jeetu Patel, President and Chief Product Officer at Cisco, described a move away from a single security perimeter toward controls distributed across microservices, containers and clusters. Patel said Cisco can deploy “a mini security stack in front of every microservice, every Kubernetes container, and every Kubernetes cluster,” and use application-level controls to limit communications to what each service requires.
According to Patel, this selective isolation lets unaffected services continue running while teams investigate and respond to incidents. He added that correlating telemetry across the network helps reveal meaningful patterns that single signals do not show.
Using AI to close the response gap
Patel highlighted the gap between how quickly attackers can exploit vulnerabilities and the time organizations need to patch them. He said AI gives defenders capacity to investigate more threats and act faster: “AI hands attackers speed and scale. Using AI for defense is a prerequisite for staying safe.” Patel credited initiatives such as Daybreak and GPT‑6 Astra with “step function improvements” in investigation, response and remediation for Cisco and its customers.
Patel also outlined three priorities for securing agentic systems: protect agents from malicious attacks, detect and intercept unintended agent behavior, and operate in near real time. He said these priorities are guiding the development of policies and controls that adapt as agents act.
OpenAI described its enterprise data privacy approach as centered on zero data retention, strict customer data boundaries and verifiable isolation, a set of safeguards Cisco cited as enabling deployment of frontier models across mission-critical systems without compromising customer telemetry. Cisco and OpenAI are exploring the Daybreak Defense Network to help security teams triage exposure faster and enforce controls via Cisco Cloud Control, a step Patel says shifts the advantage toward defenders.
Original source: OpenAI News