GCHQ to build AI cyber shield for UK infrastructure

GCHQ has confirmed plans to build a national cyber shield that will use agentic artificial intelligence to detect and counter threats to the UK’s energy, water, health, transport and financial systems. The agency expects the capability to be operational within five years and says the system will operate at “machine speed” to identify and repair software and infrastructure vulnerabilities.

GCHQ director Anne Keast-Butler told officials the agency developed a blueprint in recent months and is now moving to delivery. The Cabinet Office has asked leading AI companies to work with government rather than rely on off-the-shelf products. Ministers have described the programme as a “generational endeavour” and Security Minister Dan Jarvis first announced the national cyber shield in April.

The programme will deploy AI agents to monitor critical national infrastructure and to respond to sophisticated attacks. GCHQ is also integrating advanced AI into its own tools for tasks such as translating foreign languages and speeding searches through large volumes of data.

Officials pointed to a cyber attack on Jaguar Land Rover as an example of the economic damage such incidents can cause, with losses estimated at about £1.5 billion. The agency warned that the latest frontier AI models can uncover large numbers of previously unknown vulnerabilities in commonly used software, increasing demand for automated and scalable defensive tools.

GCHQ highlighted a rise in “hybrid” operations from state actors, noting increased activity attributed to Russia that includes attacks on undersea cables and pipelines. The National Cyber Force was described as carrying out high-impact operations daily to counter state threats, terrorists and criminals. Protecting the data and energy that flow through undersea cables and pipelines was identified as a priority for the new defence capability.

On technology supply, Keast-Butler said it is not realistic to shut out foreign technology. She defined tech sovereignty as the ability and agility of nations to shape their digital future, and indicated the UK will support domestic tech firms and academic research while managing supply chains and data dependencies.

The director also warned about the coming impact of quantum computing and urged organisations to adopt encryption that will resist quantum-enabled attacks. GCHQ said it is developing new cryptographic techniques for the quantum era and referenced its historical role in advancing public key cryptography.

Over the five-year timetable, GCHQ plans to integrate AI agents into defensive operations, update cryptographic standards and coordinate closely with government departments, defence and intelligence partners and private-sector technology experts.