Federal AI Intelligence
Menu
Snapshot · OMB 2025 inventory · processed Oct 11, 2026
← All report templates
Federal AI Intelligence · U.S. Government AI Observatory

Federal AI landscape: executive briefing

Filtered: function = cyber_detection

Generated 2026-10-12 05:51 UTCDataset: 2025 Federal Agency AI Use Case Inventory (individually reported use cases), Office of Management and Budget (OMB). Version 2025-inventory@62d5baa65fa3, processed 2026-10-11, rules 2026.10.1. Static snapshot.Applied filters: function = cyber_detection · 48 records

Key findings

  • 48 use-case records from 16 agencies: 19 deployed (40%), 5 pilots, 19 in development or acquisition, 2 retired, 3 with no stage reported.
  • 6 records are designated high-impact; 1 of them (17%) answered at least one minimum-practice question.
  • DHS, DOJ, DOE report 27 of 48 use cases (56%).
  • 21% of reported deployed use cases (4 of 19) are classified as generative or agentic AI.
  • Of 1 deployed high-impact use cases, 0 report a completed AI impact assessment and 0 leave every minimum-practice field blank.
  • Interpretation: Blank practice fields are missing evidence, not evidence that a safeguard is absent. They mark where follow-up questions to the agency are most useful.
  • Sourcing is reported for 50% of use cases. Where reported, 46% involve in-house development.
  • 3 use cases (6%) have no reported development stage.

Lifecycle

StageRecordsShare
Deployed1940%
Pilot510%
Pre-deployment1940%
Retired24%
Not reported36%

AI technology

ClassificationRecordsShareDeployed
Generative AI1633%4
Classical / predictive ML1940%12
Natural language processing48%1
Agentic AI24%0
Other24%2
Not reported510%0

Agencies

AgencyRecordsDeployedHigh-impactCompleteness
DHS · Department of Homeland Security114066%
DOJ · Department of Justice95381%
DOE · Department of Energy74088%
VA · Department of Veterans Affairs40362%
FHFA · Federal Housing Finance Agency330100%
GSA · General Services Administration32033%
TVA · Tennessee Valley Authority20017%
SEC · Securities and Exchange Commission100100%
NRC · Nuclear Regulatory Commission110100%
NEA · National Endowment for the Arts10058%
HHS · Department of Health and Human Services100100%
USDA · Department of Agriculture10058%
TREAS · Department of the Treasury100100%
DOC · Department of Commerce1008%
PBGC · Pension Benefit Guaranty Corporation10042%
SBA · Small Business Administration100100%

High-impact designation

DesignationRecords
High-impact6
Presumed high-impact, determined not2
Not high-impact33
Not reported7

Governance evidence: use cases designated high-impact

PracticeIn placeIn progressNot in placeN/A or precludedOtherNo answerIn scope
Pre-deployment testing0100056
AI impact assessment0100056
Independent review0100056
Ongoing monitoring0100056
Operator training0100056
Fail-safe0100056
Appeal process0100056
User and public consultation0100056

"In place" means the agency reported the practice as established. "No answer" means the field was blank; it says nothing about whether the practice exists.

Method

All figures are computed directly from the normalised inventory records. Category labels are normalised from the source answer options; original values are kept on each record. Governance answers are classified as in place, in progress, not in place, not applicable, precluded, waived, other or no answer, and blanks are never read as "no". See the Methodology page for full rules.

Limitations

  • Figures are what agencies reported in the 2025 inventory. They are not verified, and registration of use cases is not complete for every agency.
  • A blank answer is missing evidence, not evidence that a practice or safeguard is absent.
  • Counts are use-case records. A larger portfolio does not indicate better performance or greater AI maturity, and agencies differ in how they split systems into use cases.
  • The inventory has no budget, cost, accuracy or outcome data. None is shown or inferred here.
  • This is a disclosure analysis. It is not an audit, a compliance determination or an official government assessment.

Source records

First 40 of 48 records, deployed first. The full list is available as CSV from the explorer with the same filters.

RecordAgency IDAgencyUse caseStage
R0064NRC-0002NRCSupport routine administrative tasks and enhancing communicationsDeployed
R0069FHFA-3FHFAPhishing Email IdentificationDeployed
R0076FHFA-10FHFASecurity and network monitoring using Cisco Identify Services engineDeployed
R0077FHFA-11FHFAVirtual Desktop using CitrixDeployed
R1179GSAElastic Machine Learning Threat Detection (Phase 1)Deployed
R1180GSAElastic Machine Learning Threat Detection (Phase 2)Deployed
R1553DOJ-0101DOJCybersecurity Defense ToolsDeployed
R1611DOJ-0169DOJUAS Threat DetectorDeployed
R1616DOJ-0174DOJExiger Supply Chain Risk Management - DDIQ Research EngineDeployed
R1617DOJ-0175DOJExiger Supply Chain Risk Management - DDIQ Due Diligence AnalyticsDeployed
R1683DOJ-0258DOJSmartphone and tablet operating systems and featuresDeployed
R1963DHS-106DHSCritical Infrastructure Network Anomaly DetectionDeployed
R1965DHS-4DHSAutomated Detection of Personally Identifiable Information (PII) in Cybersecurity DataDeployed
R1973DHS-2426DHSCybersecurity Threat Management, Detection, and ResponseDeployed
R1981DHS-419DHSAdaptiveMFADeployed
R3319DOE-441DOEMicrosoft Copilot for SecurityDeployed
R3332DOE-458DOEMachine Learning components within CrowdStrikeDeployed
R3338DOE-467DOECyber Threat EnrichmentDeployed
R3607DOE-76DOEDeep Learning Malware Analysis for reusable cyber defenses.Deployed
R0011SEC-11SECEvaluating Cybersecurity AlertsPilot
R0554NEA-0001NEAManaging Cybersecurity ControlsPre-deployment
R0807HHSC3PO: CMS Comprehensive Cybersecurity and Privacy OptimizationPilot
R1116TVAAdvanced Network Anomaly DetectionNot reported
R1121TVANetwork Anomaly DetectionNot reported
R1178GSACybersecurity ChatbotPre-deployment
R1413USDA-115USDAAutomating ATO/POAM documentationPre-deployment
R1627DOJ-0190DOJNarrative Analysis for Fusion DesktopPre-deployment
R1628DOJ-0191DOJNarrative Analysis for DOJ MISPre-deployment
R1782DOJ-0357DOJCreating and Maintaining IT Security Packages for AuthorizationsPre-deployment
R1789DOJ-0357DOJCreating and Maintaining IT Security Packages for AuthorizationsPre-deployment
R1819DHS-2446DHSCyber Threat DetectionPre-deployment
R1833DHS-107DHSMalware Reverse EngineeringPre-deployment
R1853DHS-2594DHSICE Enterprise AI AssistantPre-deployment
R1862DHS-2421DHSOne Health Threat Detection and Risk Assessment Platform (OH-TREADS) / PlannerPre-deployment
R1873DHS-2740DHSRisk Management Framework (RMF) AutomationPre-deployment
R2010DHS-2403DHSSecurity Operation Center (SOC) Network Anomaly DetectionRetired
R2011DHS-5DHSConfidence Scoring for Cybersecurity Threat IndicatorsRetired
R2068VA-25-6956VACyber Authorization Memo GenerationPre-deployment
R2076VA-25-3685VACSOC AI Analyst Accelerator (Andesite AI)Pre-deployment
R2145VA-25-6903VAPolicy Knowledge BasePre-deployment

Prepared with Federal AI Intelligence by Irakli Petriashvili. Source: https://github.com/ombegov/2025-Federal-Agency-AI-Use-Case-Inventory