Pentagon bets on AI to guard U.S. Air Force networks from hackers

The U.S. Air Force has handed a $40 million contract to World Wide Technology, a St. Louis-based technology firm, to build an artificial intelligence-powered Security Operations Center — essentially a high-tech nerve center that will monitor the service’s networks around the clock for cyber intrusions, attacks, and threats.

The award, announced May 18 and running through May 2031, puts AI at the center of how the Air Force defends its digital infrastructure, shifting the work of threat detection away from exhausted human analysts and toward machine-speed automated systems.

A Security Operations Center, or SOC, is where a military or corporate organization’s cybersecurity team sits and watches network traffic for anything suspicious. Analysts monitor dashboards, investigate alerts, and respond to intrusions. The problem that has plagued SOCs for years is volume: according to Splunk’s State of Security 2025, SOCs are overwhelmed by alerts and only get to half of them each day, with defenders spending roughly one third of a typical workday investigating incidents that turn out not to be real threats. Piling AI into that workflow is the Air Force’s bet that machines can handle the flood of false alarms so that human analysts can focus on genuine threats that actually require judgment.

World Wide Technology is not a household name outside defense and technology circles, but it carries serious institutional weight inside the Pentagon. The company, which describes itself as a global technology solutions provider with over 30 years of experience serving the federal government, was selected in September 2025 as one of 49 vendors on the U.S. Army’s ten-year IT procurement contract with a ceiling value of $10 billion. The Air Force already knows WWT well: the company competed in the Air Force’s Advanced Battle Management System program, winning a position among 28 vendors on a contract vehicle worth up to $950 million over five years. The new AI-SOC award is a logical next step in that relationship, moving from broad IT support into the specific and increasingly urgent business of cyber defense.

The contract attracted genuine competition. Fifty companies submitted proposals before the Air Force selected WWT, a level of interest that reflects how crowded and commercially active the AI cybersecurity market has become. All work under the contract will be performed in San Antonio, Texas, home to Joint Base San Antonio-Lackland, where Air Combat Command’s acquisition office that issued the award is headquartered. San Antonio is not a coincidental location: the city hosts the 16th Air Force, also known as Air Forces Cyber, the service’s information warfare command responsible for operating and defending the Air Force Information Network globally.

Col. John W. Picklesimer, commander of the 67th Cyberspace Wing, said last year that AI is more than a buzzword for his airmen, describing how the service has engaged with industry partners to bring AI into SOC locations, pull data feeds, and let the AI analyze and provide quick insights. That description maps almost precisely to what the WWT contract is designed to deliver at enterprise scale across the Department of the Air Force. The gap between a pilot program and a five-year contract worth up to $40 million is the gap between experimenting with AI in a cyber watch center and actually committing to it as the foundation of the service’s defensive architecture.

The financial and strategic urgency behind this kind of investment is not hard to find. The Department of War’s cyberspace funding has grown steadily, from $13.5 billion in fiscal 2024 to $14.5 billion in fiscal 2025 and $15.1 billion in fiscal 2026, according to budget requests, with roughly $1.8 billion annually earmarked specifically for AI and machine learning. Those numbers reflect an adversary environment that has grown faster and more dangerous than traditional defenses were built to handle. The U.S. Intelligence Community’s 2026 Annual Threat Assessment described AI as a “defining technology for the 21st century” and warned that adversaries are actively weaponizing it to boost military power, cyber capabilities, and global influence.

The Air Force’s cyber command has been preparing for exactly this kind of threat environment for some time. Lt. Gen. Thomas Hensley, commander of the 16th Air Force, said at an AFCEA event in late 2024 that China has explicitly stated it wants to be militarily ready to lead the United States in a regional conflict by 2027, making the date one that cannot be mentioned often enough in planning conversations. An AI-enabled SOC sitting in San Antonio, watching the Air Force’s networks in real time, is one piece of the answer to what that 2027 deadline actually demands in practical defensive terms.

According to the 2026 Threat Detection Report, AI-powered defense systems have in some scenarios reduced investigation times from over 30 minutes to under two minutes, accelerating threat detection while maintaining accuracy through human validation. That kind of speed advantage matters enormously in a cyber environment where nation-state attackers move fast, cover their tracks, and increasingly use their own AI tools to probe for weaknesses. Catching an intrusion two minutes after it begins versus thirty minutes after it begins is not a minor operational improvement. At the speed modern networks operate, it can be the difference between containing a breach and losing control of critical systems entirely.

The first task order under the WWT contract draws on two funding streams: about $7.2 million from Air Force operations and maintenance funds and roughly $4.1 million from research, development, and evaluation money. That split between operating funds and R&D dollars signals that this is not a purely operational deployment. There is still active development work involved, which means WWT and the Air Force will be building and refining the AI system while also running it, a demanding combination that reflects just how fast the threat environment is moving relative to the pace at which the Pentagon typically acquires new capabilities.