GCHQ unveils plan for AI-powered cyber ‘shield’ to defend UK at machine speed

The UK’s intelligence agency GCHQ has set out plans to develop an AI-powered national cyber defence system designed to protect critical infrastructure at “machine speed”, as officials warn of escalating state-backed attacks on Britain’s digital systems.

Speaking at a recent briefing, GCHQ director Anne Keast-Butler confirmed that the agency has produced a blueprint for embedding agentic artificial intelligence into national cyber defence, enabling rapid detection and response to threats targeting essential services.

The proposed system would be capable of defending energy, water, healthcare, transport and financial networks, with ministers describing the project as a “generational endeavour” intended to reshape the UK’s cyber resilience over the next decade.

Under the plans, AI systems would identify vulnerabilities, detect intrusions and, in some cases, initiate automated repairs in real time, dramatically reducing response times from hours or days to near-instant intervention.

Andy Ward SVP International at Absolute Security: “AI in cybersecurity offers huge potential to improve detection and speed up response times. However, AI is also causing cyber threats to become smarter and faster.”

“Attacks now move at AI speed, disruption moves at AI speed, and complexity grows at AI speed, so if your resilience doesn’t move at AI speeds, you’ve already lost.  Our recent research found that 42% of UK organisations still lack a formal cyber resilience strategy. Without robust AI-powered cyber resilience strategies and real-time visibility in place, the UK risks sleepwalking into deeper vulnerabilities.

“By leveraging AI to restore continuity after disruptive attacks, organisations can avoid becoming trapped in downtime cycles that will only worsen as cybercriminals increasingly adopt AI-powered attacks.”

Officials said the initiative reflects a growing recognition that cyber conflict is now conducted at machine speed, requiring equally rapid defensive capabilities to match adversaries who operate with increasingly sophisticated tools.

The programme is expected to become operational within five years and forms part of a broader push to strengthen the protection of critical national infrastructure following a series of disruptive incidents affecting major firms and public services.

GCHQ said frontier AI systems are already capable of identifying large volumes of previously unknown software vulnerabilities, creating both a major opportunity for defence and a heightened urgency to deploy such technologies safely and effectively.

The agency warned that hostile state actors are increasingly targeting undersea cables, supply chains and democratic institutions as part of a widening campaign of hybrid warfare.

Russia was singled out as a particular concern, with officials saying it is intensifying efforts to probe and disrupt critical systems across Europe, including the UK’s digital infrastructure.

The “national cyber shield” initiative is intended to provide a coordinated response across government and industry, integrating AI-driven tools into existing security frameworks to create a more automated and resilient national defence posture.

Ministers argue the programme will be essential in maintaining national security as cyber threats evolve beyond the capacity of traditional, human-led response systems alone.