Federal AI Intelligence · U.S. Government AI Observatory
Custom inventory report
Filter: topic = Cybersecurity; AI type = classical_ml; sourcing = vendor
Key findings
- 14 use-case records from 6 agencies: 9 deployed (64%), 2 pilots, 3 in development or acquisition, 0 retired, 0 with no stage reported.
- 2 records are designated high-impact; 0 of them (0%) answered at least one minimum-practice question.
- FHFA, VA, SBA report 9 of 14 use cases (64%).
- 0% of reported deployed use cases (0 of 9) are classified as generative or agentic AI.
- Of 1 deployed high-impact use cases, 0 report a completed AI impact assessment and 1 leave every minimum-practice field blank.
- Interpretation: Blank practice fields are missing evidence, not evidence that a safeguard is absent. They mark where follow-up questions to the agency are most useful.
- Sourcing is reported for 100% of use cases. Where reported, 0% involve in-house development.
Lifecycle
| Stage | Records | Share |
|---|---|---|
| Deployed | 9 | 64% |
| Pilot | 2 | 14% |
| Pre-deployment | 3 | 21% |
AI technology
| Classification | Records | Share | Deployed |
|---|---|---|---|
| Classical / predictive ML | 14 | 100% | 9 |
Agencies
| Agency | Records | Deployed | High-impact | Completeness |
|---|---|---|---|---|
| FHFA · Federal Housing Finance Agency | 3 | 3 | 0 | 100% |
| VA · Department of Veterans Affairs | 3 | 1 | 2 | 75% |
| SBA · Small Business Administration | 3 | 0 | 0 | 100% |
| DOE · Department of Energy | 3 | 3 | 0 | 100% |
| DOJ · Department of Justice | 1 | 1 | 0 | 100% |
| SSA · Social Security Administration | 1 | 1 | 0 | 100% |
High-impact designation
| Designation | Records |
|---|---|
| High-impact | 2 |
| Not high-impact | 12 |
Governance evidence: use cases designated high-impact
| Practice | In place | In progress | Not in place | N/A or precluded | Other | No answer | In scope |
|---|---|---|---|---|---|---|---|
| Pre-deployment testing | 0 | 0 | 0 | 0 | 0 | 2 | 2 |
| AI impact assessment | 0 | 0 | 0 | 0 | 0 | 2 | 2 |
| Independent review | 0 | 0 | 0 | 0 | 0 | 2 | 2 |
| Ongoing monitoring | 0 | 0 | 0 | 0 | 0 | 2 | 2 |
| Operator training | 0 | 0 | 0 | 0 | 0 | 2 | 2 |
| Fail-safe | 0 | 0 | 0 | 0 | 0 | 2 | 2 |
| Appeal process | 0 | 0 | 0 | 0 | 0 | 2 | 2 |
| User and public consultation | 0 | 0 | 0 | 0 | 0 | 2 | 2 |
"In place" means the agency reported the practice as established. "No answer" means the field was blank; it says nothing about whether the practice exists.
Method
All figures are computed directly from the normalised inventory records. Category labels are normalised from the source answer options; original values are kept on each record. Governance answers are classified as in place, in progress, not in place, not applicable, precluded, waived, other or no answer, and blanks are never read as "no". See the Methodology page for full rules.
Limitations
- Figures are what agencies reported in the 2025 inventory. They are not verified, and registration of use cases is not complete for every agency.
- A blank answer is missing evidence, not evidence that a practice or safeguard is absent.
- Counts are use-case records. A larger portfolio does not indicate better performance or greater AI maturity, and agencies differ in how they split systems into use cases.
- The inventory has no budget, cost, accuracy or outcome data. None is shown or inferred here.
- This is a disclosure analysis. It is not an audit, a compliance determination or an official government assessment.
Source records
All 14 records.
| Record | Agency ID | Agency | Use case | Stage |
|---|---|---|---|---|
| R0069 | FHFA-3 | FHFA | Phishing Email Identification | Deployed |
| R0076 | FHFA-10 | FHFA | Security and network monitoring using Cisco Identify Services engine | Deployed |
| R0080 | FHFA-14 | FHFA | Security and Compliance in file sharing and collaboration using Kiteworks | Deployed |
| R1553 | DOJ-0101 | DOJ | Cybersecurity Defense Tools | Deployed |
| R2227 | VA-25-2537 | VA | Heuristic Behavior Analytics | Deployed |
| R3117 | SSA | Application Observability Support | Deployed | |
| R3290 | DOE-347 | DOE | Network Security and Analysis | Deployed |
| R3331 | DOE-456 | DOE | Machine Learning components within Splunk Enterprise Security | Deployed |
| R3332 | DOE-458 | DOE | Machine Learning components within CrowdStrike | Deployed |
| R2205 | VA-25-6479 | VA | Secure Access Service Edge (SASE) | Pilot |
| R2218 | VA-24-2791 | VA | Internet of Medical Things (IoMT) Inventory | Pilot |
| R3192 | SBA-36 | SBA | AI Resolution Notes Generation | Pre-deployment |
| R3193 | SBA-37 | SBA | AI Vulnerability Ticket Deduplication | Pre-deployment |
| R3194 | SBA-38 | SBA | AI Vulnerability Remediation Assistance | Pre-deployment |
Prepared with Federal AI Intelligence by Irakli Petriashvili. Source: https://github.com/ombegov/2025-Federal-Agency-AI-Use-Case-Inventory