Fujitsu launches AI incident response in Japan: threat reports in a day, forensics in two — with experts checking the AI’s work
Fujitsu has launched a new incident response service in Japan that pairs a threat analysis AI system with human security experts — promising threat-analysis reports in as little as one business day and forensic reports in two. The pitch is speed: attacks now move faster than the investigations meant to contain them, and Fujitsu says its AI does the expert-style analysis in a significantly shorter time, with experts verifying the results.
- Who and when: Fujitsu Limited launched the service in Japan on November 1, 2026, announced from Kawasaki, Japan.
- What it is: a retainer-based incident response service combining a threat analysis AI system powered by frontier AI with hands-on support from Fujitsu security experts, available 24/7 through a dedicated portal.
- How it works: customers upload suspicious files and device data for analysis of malware and suspicious URLs, forensic investigation of signs of compromise, and assessment of damage.
- Report speed: investigation reports in as little as one business day for threat analysis and two business days for forensic investigations.
- Escalation: if the AI analysis indicates widespread impact or a need for emergency intervention, Fujitsu’s incident response team performs triage and log analysis and proposes and implements containment and recovery measures.
- Context and gaps: the service sits under Fujitsu’s “Cyber Security Nerve Center” framework, established October 1, 2026. The announcement discloses no fee amount, no model name, and no customers.
Fujitsu Limited has launched a new incident response service in Japan, combining AI-driven rapid threat investigation with support from security experts. Announced on November 1, 2026, the retainer-based service is built around a threat analysis AI system powered by frontier AI, which runs 24/7 to trace signs of compromise, assess damage, and perform sophisticated threat analysis for malware and suspicious URLs, according to Fujitsu’s announcement.
The pitch is speed. Deep investigations have traditionally required extensive time and specialized knowledge, Fujitsu says, and the new system performs investigations and analyses that security experts have traditionally conducted in a significantly shorter period of time. The results are then verified and complemented by Fujitsu’s security experts, who deliver investigation reports covering signs of compromise, suspicious activities, and recommended countermeasures — the findings a business needs to decide what to shut down, patch, or restore.
How it works#
Customers upload suspicious files and device data to a dedicated portal, and the AI-powered system analyses them around the clock. Fujitsu says that enables investigation reports in as little as one business day for threat analysis and two business days for forensic investigations — a forensic investigation being the work of identifying entry points and damage scope from traces left by attackers on devices and in logs.
There is a caveat in the fine print. When multiple investigations are requested at the same time, Fujitsu’s experts review the AI results, consult the customer on the need and priority for further action, and provide investigation reports for the cases that require further investigation. The one- and two-day figures are best-case turnarounds, not a guarantee for every simultaneous request.
If the AI analysis indicates widespread impact or the need for emergency intervention, Fujitsu’s incident response team steps in directly. The team performs triage — a preliminary investigation to determine whether a compromise occurred, understand its scope, and assess severity — and log analysis, then proposes and implements containment and recovery measures.
Why speed is the point#
Fujitsu frames the launch as a response to faster attacks. The rapid evolution of AI has increased the speed of cyberattacks, the company says, shrinking the time between an initial breach and significant damage. Enterprises are under greater pressure not only to prevent incidents but to respond and recover swiftly to minimize business impact — and accurately identifying the cause and scope of an incident in time is the hard part.
Forensic investigations and malware analysis often require specialized expertise and can be time-consuming, potentially delaying crucial decision-making, Fujitsu says. Securing cybersecurity professionals and maintaining an internal, round-the-clock incident response capability can also be challenging for many organizations. The new service is, in effect, Fujitsu selling that capability on retainer: support from its experts for up to a certain number of hours is included in the base fee, with additional support available as needed.
A planned step, not a surprise launch#
This service was already on Fujitsu’s roadmap. In an October 27 announcement, the company said that by the end of fiscal year 2026 it planned to enhance its security operations services, including cyber incident response support combining AI-powered investigation with the expertise of security specialists. That work sits under the “Cyber Security Nerve Center” framework Fujitsu established on October 1, 2026, following a cybersecurity strategy announced in August 2026. The November 1 launch is that planned enhancement arriving as a live offering in Japan.
What the announcement leaves out is just as telling. It discloses no fee amount, names no frontier model behind the threat analysis system, cites no customers, and gives no accuracy or benchmark figures beyond the report timelines and the claim of a significantly shorter investigation. It also says nothing about expanding the service beyond Japan. For now, the verifiable story is narrow: a 24/7 AI-assisted investigation service, with humans verifying the output, promising reports in one to two business days for Japanese customers willing to pay a retainer Fujitsu has not priced in public.
Sources: Fujitsu launches service combining rapid AI-driven incident investigation with expert response support (JCN Newswire / Fujitsu announcement), November 1, 2026; Fujitsu launches solution to strengthen corporate cyber defense capabilities (Fujitsu), October 27, 2026 — checked November 1, 2026.
Frequently asked questions
What did Fujitsu launch, and where?
A retainer-based incident response service in Japan, launched on November 1, 2026. It combines a 24/7 threat analysis AI system powered by frontier AI with hands-on support from Fujitsu security experts, with customers uploading suspicious files and device data to a dedicated portal.
How fast are the investigation reports?
In as little as one business day for threat analysis and two business days for forensic investigations. When multiple investigations are requested at once, experts review the results and consult the customer on priority, so the fastest turnaround does not apply to every simultaneous request.
Does the AI investigate on its own?
No. Fujitsu says the AI system performs the analysis in a significantly shorter time than traditional expert-led investigations, but its security experts verify and complement the results. The incident response team also steps in directly for triage, log analysis, containment, and recovery when the AI indicates widespread impact or a need for emergency intervention.