Fujitsu Limited has launched a new incident response service in Japan that pairs rapid, AI-driven threat investigation with hands-on support from security experts. Announced on November 1, 2026, the service is aimed at businesses facing cyber incidents and needing answers quickly, at a time when attacks can move from an initial breach to serious damage in a short window.
The service is built around a threat analysis AI system powered by frontier AI. It runs around the clock and carries out forensic investigations that trace signs of compromise, assess damage, and perform sophisticated threat analysis for malware and suspicious URLs. Work that has traditionally been conducted by security experts is completed in a significantly shorter period of time, with the results verified and complemented by Fujitsu’s security experts.
Key Takeaways
- Fujitsu has launched a retainer-based incident response service in Japan combining AI-driven investigation with expert support.
- The AI system runs 24/7, tracing signs of compromise and analysing malware and suspicious URLs.
- Threat analysis reports can arrive in as little as one business day, and forensic investigation reports in as little as two business days.
How the service works
The service operates as a retainer-based offering. Support from Fujitsu’s experts for up to a certain number of hours is included in the base fee, with additional support available as needed. That structure gives customers a standing route to help rather than a scramble to find specialists after an incident has already begun.
Customers can upload suspicious files and device data to a dedicated portal for rapid analysis. The AI-powered system, available 24 hours a day, then produces investigation reports, in as little as one business day for threat analysis and two business days for forensic investigations. Where multiple investigations are requested at the same time, Fujitsu’s security experts review the results, consult with the customer to determine the need and priority for further action, and provide investigation reports for cases requiring further investigation.
The system performs investigations and analyses that have traditionally been conducted by security experts in a significantly shorter period of time, with results verified and complemented by Fujitsu’s security experts.
When experts step in
Speed alone is not the whole offer. If the AI analysis indicates widespread impact or the need for emergency intervention, Fujitsu’s incident response team steps in to perform triage and log analysis, and to propose and implement appropriate containment and recovery measures. The combination matters because an automated finding still needs human judgement about what to contain first, what to recover, and what to watch next.
Fujitsu says the rapid evolution of AI has increased the speed of cyberattacks, shrinking the time between an initial breach and significant damage. That pressure is the reason the service is designed around fast initial assessment: the sooner a business understands the entry point and the extent of the damage, the sooner it can limit the harm.
- 24/7 AI threat analysis and forensic investigation
- Uploads of suspicious files and device data through a dedicated portal
- Reports in as little as one business day for threat analysis and two for forensics
- Expert triage, log analysis, containment and recovery when impact is widespread
Part of a wider cyber defence push
The launch sits within Fujitsu’s wider cybersecurity work. The company said it will continue to evolve the service under the strategic framework of its “Cyber Security Nerve Center,” integrating AI capabilities with deep cybersecurity expertise to advance incident response. That framework also underpins its broader cyber defence solution for organisations, announced in late October, which brought together attack surface management and cyber threat intelligence.
The timing also reflects a wider shift in how AI is being used on both sides of cybersecurity. AI models are increasingly tested for their ability to assist with cyberattacks under controlled conditions, as seen in recent work on AI models and cyberattack testing, while new models are also being positioned for defensive roles, including cybersecurity uses of advanced AI models. Fujitsu’s service lands squarely on the defensive side of that debate: AI doing the first, fastest pass, with experts deciding what happens next.
What to Watch Next
What to watch next is how quickly businesses in Japan take up the retainer model, and whether the one-to-two-business-day report turnaround holds up under real incidents. Also worth watching is how the service evolves under the Cyber Security Nerve Center framework, and whether Fujitsu extends the same AI-plus-expert approach to further incident response and security operations services. For now, the launch gives organisations a faster first answer when a suspected incident lands, backed by experts when the impact turns out to be serious.