SoftBank announces AI-assisted vulnerability assessment and remediation service

What the service covers

SoftBank Group, SoftBank Corp. and SB OAI Japan announced Patching as a Service on June 16. The companies described a service offered in Japan that supports enterprise vulnerability assessment, remediation planning and implementation advice using OpenAI technology and SoftBank’s operational expertise.

Assessment and remediation advice still leave the customer with decisions about testing and production changes. The announcement is evidence of the offering and its intended functions; it is not independent evidence of detection accuracy or reduced incident rates.

Sources: SoftBank Group [1]

Questions for an enterprise buyer

Ask which systems are supported, what access the service requires and who authorizes changes. A useful pilot should record findings, false positives, remediation time and whether proposed changes survive testing.

Require a documented rollback process and a named owner for production decisions. Contract language should explain how sensitive system information is handled and how responsibility is divided between the customer and provider. These procurement checks turn a broad AI promise into a service that can be assessed.

Define what a pilot must demonstrate

Choose a supported, non-production system and agree on the scope of access before the assessment. For each finding, ask for the affected component, evidence, proposed action and a way to verify the fix. Include cases your team already understands so it can judge how clearly the service explains a result.

Record which recommendations required correction and how long approval, testing and deployment took. Agree on stopping conditions, such as access beyond the approved scope or a change that cannot be rolled back. The procurement decision should consider the full review workload, not only the number of findings produced.