Networking and security services provider GTT Communications Inc. today launched GTT Defense Halo, a network defense platform that uses artificial intelligence to hunt for threats on enterprise networks.
Defense Halo is aimed at shrinking the time vulnerabilities and threats go unnoticed on corporate networks. GTT tied the launch to an open letter signed in late August by more than 100 technology, cybersecurity and financial services companies. Organized by OpenAI Group PBC, the letter warned that AI-enabled attacks would become far more widespread within months.
GTT Chief Product and Technology Officer Fletcher Keister said every security leader he speaks with is “fighting the same battle against the clock,” and AI-powered threats make it harder. A vulnerability gets riskier the longer it goes undetected, according to Keister, and Defense Halo was built so customers could find and act on such weaknesses much sooner.
On the vulnerability side, one module checks firewall and device configurations against security frameworks whenever they change. A second module maps known vulnerabilities to the specific assets a customer runs and ranks them by priority. Remediation plans generated by AI come back in real time, with the aim of closing gaps before attackers discover them.
Detection is tuned to each customer’s own network. The software builds a behavioral baseline from logs and traffic flows, and any anomaly that strays from it gets checked in real time to decide whether it amounts to a genuine threat. GTT says confirmed threats can then be contained at network speed through automated runbooks on compatible devices.
The platform also keeps a live, stateful model of the customer’s network showing every host-to-host connection. Threat hunters can work from that picture in real time, and the same model feeds the platform’s exposure assessments when a new vulnerability surfaces.
GTT runs the software on what it calls its AI factory, compute capacity built into its global Tier 1 backbone and hosted in the U.S., the U.K. and the European Union to meet data sovereignty requirements. Each customer gets a dedicated, isolated instance of the patent-pending system.
Amy DeCarlo, principal analyst for security and data center services at GlobalData plc, said most security products only analyze traffic once it has been collected and normalized, which adds latency, cost and blind spots. She described GTT’s decision to run AI inference inside its own network as “architecturally different.” Paired with isolated customer models and in-region data residency, DeCarlo said, the result is something endpoint-centric and log-centric platforms “are not positioned to match.”
Defense Halo is available now, and GTT said select customers are already running it.