Federal AI Intelligence
Menu
Snapshot · OMB 2025 inventory · processed Oct 11, 2026
Federal AI Intelligence · U.S. Government AI Observatory

Custom inventory report

Filter: topic = Cybersecurity; AI type = classical_ml; failsafe = blank

Generated 2026-10-12 19:32 UTCDataset: 2025 Federal Agency AI Use Case Inventory (individually reported use cases), Office of Management and Budget (OMB). Version 2025-inventory@62d5baa65fa3, processed 2026-10-11, rules 2026.10.1. Static snapshot.Applied filters: topic = Cybersecurity; AI type = classical_ml; failsafe = blank · 24 records

Key findings

  • 24 use-case records from 9 agencies: 14 deployed (58%), 2 pilots, 8 in development or acquisition, 0 retired, 0 with no stage reported.
  • 4 records are designated high-impact; 0 of them (0%) answered at least one minimum-practice question.
  • DHS, VA, FHFA report 15 of 24 use cases (63%).
  • 0% of reported deployed use cases (0 of 14) are classified as generative or agentic AI.
  • Of 1 deployed high-impact use cases, 0 report a completed AI impact assessment and 1 leave every minimum-practice field blank.
  • Interpretation: Blank practice fields are missing evidence, not evidence that a safeguard is absent. They mark where follow-up questions to the agency are most useful.
  • Sourcing is reported for 58% of use cases. Where reported, 21% involve in-house development.

Lifecycle

StageRecordsShare
Deployed1458%
Pilot28%
Pre-deployment833%

AI technology

ClassificationRecordsShareDeployed
Classical / predictive ML24100%14

Agencies

AgencyRecordsDeployedHigh-impactCompleteness
DHS · Department of Homeland Security63079%
VA · Department of Veterans Affairs61467%
FHFA · Federal Housing Finance Agency330100%
DOE · Department of Energy330100%
GSA · General Services Administration22033%
NASA · National Aeronautics and Space Administration10058%
NEA · National Endowment for the Arts10058%
DOJ · Department of Justice110100%
SSA · Social Security Administration110100%

High-impact designation

DesignationRecords
High-impact4
Presumed high-impact, determined not2
Not high-impact16
Not reported2

Governance evidence: use cases designated high-impact

PracticeIn placeIn progressNot in placeN/A or precludedOtherNo answerIn scope
Pre-deployment testing0000044
AI impact assessment0000044
Independent review0000044
Ongoing monitoring0000044
Operator training0000044
Fail-safe0000044
Appeal process0000044
User and public consultation0000044

"In place" means the agency reported the practice as established. "No answer" means the field was blank; it says nothing about whether the practice exists.

Method

All figures are computed directly from the normalised inventory records. Category labels are normalised from the source answer options; original values are kept on each record. Governance answers are classified as in place, in progress, not in place, not applicable, precluded, waived, other or no answer, and blanks are never read as "no". See the Methodology page for full rules.

Limitations

  • Figures are what agencies reported in the 2025 inventory. They are not verified, and registration of use cases is not complete for every agency.
  • A blank answer is missing evidence, not evidence that a practice or safeguard is absent.
  • Counts are use-case records. A larger portfolio does not indicate better performance or greater AI maturity, and agencies differ in how they split systems into use cases.
  • The inventory has no budget, cost, accuracy or outcome data. None is shown or inferred here.
  • This is a disclosure analysis. It is not an audit, a compliance determination or an official government assessment.

Source records

All 24 records.

RecordAgency IDAgencyUse caseStage
R0069FHFA-3FHFAPhishing Email IdentificationDeployed
R0076FHFA-10FHFASecurity and network monitoring using Cisco Identify Services engineDeployed
R0080FHFA-14FHFASecurity and Compliance in file sharing and collaboration using KiteworksDeployed
R1179GSAElastic Machine Learning Threat Detection (Phase 1)Deployed
R1180GSAElastic Machine Learning Threat Detection (Phase 2)Deployed
R1553DOJ-0101DOJCybersecurity Defense ToolsDeployed
R1951DHS-372DHSUser Entity and Behavior Analytics (UEBA) for Security Operations (SecOps) Anomaly IdentificationDeployed
R1963DHS-106DHSCritical Infrastructure Network Anomaly DetectionDeployed
R1971DHS-2424DHSAI Assisted Compromise Email Detector (AACED)Deployed
R2227VA-25-2537VAHeuristic Behavior AnalyticsDeployed
R3117SSAApplication Observability SupportDeployed
R3290DOE-347DOENetwork Security and AnalysisDeployed
R3331DOE-456DOEMachine Learning components within Splunk Enterprise SecurityDeployed
R3332DOE-458DOEMachine Learning components within CrowdStrikeDeployed
R0299NASA-578NASAAutonomous Network SecurityPre-deployment
R0554NEA-0001NEAManaging Cybersecurity ControlsPre-deployment
R1814DHS-417DHSMachine Learning Analysis Applied to Cyber Threat Hunt DataPre-deployment
R1819DHS-2446DHSCyber Threat DetectionPre-deployment
R1833DHS-107DHSMalware Reverse EngineeringPre-deployment
R2068VA-25-6956VACyber Authorization Memo GenerationPre-deployment
R2072VA-24-585VAForescout: AI Behavioral Anomaly Detection w/ Automated EnforcementPre-deployment
R2145VA-25-6903VAPolicy Knowledge BasePre-deployment
R2205VA-25-6479VASecure Access Service Edge (SASE)Pilot
R2218VA-24-2791VAInternet of Medical Things (IoMT) InventoryPilot

Prepared with Federal AI Intelligence by Irakli Petriashvili. Source: https://github.com/ombegov/2025-Federal-Agency-AI-Use-Case-Inventory