IBM: Project Glasswing brings the most advanced AI-powered security portfolio for enterprise

On May 19, 2026, IBM announced its most ambitious step in enterprise cybersecurity: a full AI-powered security portfolio strengthened by work on Project Glasswing. The goal is clear — respond to threats that move faster than traditional defenses can track.

What is Project Glasswing?

Project Glasswing is an industry coalition of security and technology leaders collaborating with Anthropic to protect critical software infrastructure. The coalition identifies and remediates vulnerabilities in widely used software, coordinates their disclosure to all stakeholders, and contributes the discovered fixes back to the open-source community. Rather than a siloed approach, Glasswing builds an ecosystem of shared defense against AI-powered attacks that have already crossed the threshold of what traditional tools can track.

Autonomous detection: from alert to response without a human in the loop

The central element of the new portfolio is IBM Autonomous Security — a multi-agent service that coordinates threat detection, decision-making, and response at machine speed. In addition, IBM Concert unifies signals from applications, infrastructure, and the network into a single intelligent response, while IBM Concert Secure Coder detects risks directly in the developer’s IDE, prioritizes them by business impact, and automatically generates remediations — before code ever reaches production.

Why this matters for enterprise security

Rob Thomas, IBM SVP Software and Chief Commercial Officer, summarized the threat: “AI attackers have already moved beyond what traditional defenses can track.” Attackers today use AI at every stage of an attack — from reconnaissance and vulnerability discovery to exploitation. IBM’s response is not a new tool but an integrated portfolio covering the entire threat lifecycle. For enterprise organizations managing thousands of systems, autonomous detection and coordinated response without manual intervention becomes not an option but a necessity.

Project Glasswing and the new portfolio together signal an industry shift: cybersecurity is entering an era where AI does not merely assist defenders — it becomes the primary defensive layer.