SoftBank has launched an OpenAI-powered cybersecurity service aimed at Japan's 3,000 critical infrastructure operators, with a focus on human-guided patch management. The service, delivered through SB OAI Japan, a joint venture between SoftBank and OpenAI, is designed to continuously scan, prioritize, and propose remediation plans for vulnerabilities.
TL;DR
- SoftBank introduces an OpenAI-based 'Patching as a Service' for 3,000 critical Japanese firms, emphasizing human oversight in patch deployment.
- The service uses OpenAI models to continuously scan and prioritize vulnerabilities, but human teams execute the patches.
What happened
SoftBank Group and SoftBank Corp. have rolled out 'Patching as a Service,' an AI-powered cybersecurity offering built on OpenAI models, targeting approximately 3,000 Japanese enterprises designated as critical infrastructure operators by the government. The service is delivered through SB OAI Japan GK, a 50:50 joint venture between SoftBank Corp. and OpenAI formed in late 2025.
The service uses OpenAI models tuned for cybersecurity to run continuous or scheduled vulnerability assessments across an enterprise's systems. Semi-autonomous agents monitor, analyze, re-evaluate, and simulate attack paths over time, prioritizing vulnerabilities based on impact, exploitability, and business context. The agents propose remediation plans under human oversight and can initiate workflows, opening tickets and recommending patch schedules.
Why it matters
This deployment is one of the most ambitious AI-driven cybersecurity initiatives globally and the largest of its kind in Japan. It underscores SoftBank's role as a primary channel for OpenAI technology in the Japanese market, addressing the critical need for enhanced cybersecurity in infrastructure sectors.
The service's agentic approach, which involves continuous monitoring and prioritization, sets it apart from traditional vulnerability management tools. However, it is important to note that the system does not automatically deploy patches, emphasizing human decision-making in critical infrastructure operations.
Key facts
- SoftBank's 'Patching as a Service' targets 3,000 critical infrastructure operators in Japan.
- The service is delivered through SB OAI Japan GK, a joint venture between SoftBank Corp. and OpenAI.
- The service uses OpenAI models to continuously scan and prioritize vulnerabilities.
- Semi-autonomous agents propose remediation plans under human oversight.
- SoftBank plans to grow its implementation team from 50 to 1,000 specialists as adoption ramps up.
- The service offers free cybersecurity posture diagnostics to enterprises as an entry point into deeper engagements.
- SoftBank CEO Masayoshi Son emphasized the duty to 'plug the holes' in Japan's critical infrastructure.
- The service is designed to address the increasing threat of AI-accelerated cyberattacks.
Context
SoftBank's initiative comes at a time when AI-driven cyberattacks are becoming more sophisticated and frequent. The service aims to address the critical need for enhanced cybersecurity in Japan's infrastructure sectors, which include energy, transport, telecom, finance, water, and healthcare.
The joint venture SB OAI Japan GK is a strategic move by SoftBank to localize OpenAI technology for the Japanese market, ensuring compliance with local regulations and alignment with domestic IT architectures.
