GCHQ to build AI cyber shield for UK infrastructure

GCHQ confirmed plans to build an AI-powered national cyber shield designed to detect and repair threats to the UK’s critical infrastructure, with the system expected to be operational within five years. The program will focus on sectors including energy, water, health, transport and financial services and will use autonomous AI agents to respond at machine speed.

GCHQ director Anne Keast-Butler said the agency “has developed the blueprint for a new national cyber defence capability that will hardwire cutting-edge agentic AI into machine-speed cyber defence.” The design calls for autonomous systems to identify software vulnerabilities and to react to incidents affecting hospitals, power networks, water supplies, transport links and financial systems.

Ministers described the project as a “generational endeavor” aimed at protecting the country from more sophisticated attacks. Officials cited a recent cyber incident affecting an automaker that was estimated to have cost the economy £1.5 billion as an example of the potential scale of damage the shield aims to reduce.

Keast-Butler said GCHQ will also build frontier AI into tools used to analyze intelligence, including translating foreign languages and locating relevant material more quickly. She warned that the newest AI models can reveal previously unknown software weaknesses, “rapidly unearthing fault lines in technologies our society relies on every single day,” and said the agency is developing those capabilities with ethical and safety safeguards.

Officials point to an intensifying threat picture. Keast-Butler reported that Russia has increased activity against the UK and Europe, targeting undersea cables and conducting cyber operations that form part of broader hybrid campaigns against infrastructure, supply chains and public trust. The National Cyber Force is carrying out high-impact operations aimed at state and criminal threats and protecting data and energy flows through undersea cables and pipelines remains a stated priority.

Security minister Dan Jarvis first outlined plans for a national cyber shield in April and the Cabinet Office has invited major AI firms to work with government departments to build the defense capability. Keast-Butler described tech sovereignty as a country’s ability and agility to shape its digital future and said the government will support UK firms and research while continuing to use global technologies where appropriate.

GCHQ highlighted further risks from quantum computing and space-based systems. The agency said quantum sensing already delivers new capabilities, including detecting missile launches, and warned that operational quantum computers could perform tasks that now take years in seconds, including breaking current encryption. Businesses were urged to follow guidance from the National Cyber Security Centre on adopting encryption algorithms that resist quantum attacks. GCHQ noted rapid growth in space activity and said China, Russia and other actors are investing in space technologies that support both civilian data flows and military uses.

Cryptography remains a core focus. GCHQ pointed to its historical work on public key cryptography and said its mathematicians are developing new forms of encryption for the quantum era. The national cyber shield is presented as one element of a broader strategy combining AI, stronger cryptography, international cooperation and defensive operations to protect the UK’s digital infrastructure.