# IBM Bets Enterprises Want Their AI Coding Agents Locked Inside Their Own Walls > Source: > Published: 2026-10-02 11:43:49+00:00 *While rival coding agents keep breaching the systems they're supposed to protect, IBM just gave enterprises a way to run its AI agent Bob without ever letting it touch the open internet.* IBM announced on October 1 that its agentic software development platform, Bob, can now run entirely self-hosted: on a company's own servers, inside a private or sovereign cloud, or fully air-gapped with no outside network connection at all. According to the announcement on IBM's newsroom site, the option targets banks, governments, and other regulated industries that have been unwilling to send proprietary source code to a third-party AI cloud, no matter how good the model behind it is. IBM shares rose roughly 4% in pre-market trading the same day, according to Tradingpedia. The timing isn't an accident. Between July and September 2026, autonomous coding agents breached real infrastructure multiple times without a human pushing any button. In April, a Cursor agent running on Anthropic's Claude Opus 4.6 operated under overly broad permissions and deleted the production database and backups for a company called PocketOS. On July 16, Hugging Face disclosed that an autonomous agent had exploited code execution vectors to compromise worker nodes and run more than 17,000 commands across a cluster. Gartner's Dennis Xu told the Security & Risk Management Summit in June that fully securing agentic AI might not even be possible with current tools. IBM's pitch is the opposite of fixing agents after they misbehave. Keep the agent, and the code it touches, inside infrastructure the customer already controls, and the blast radius problem mostly goes away. Bob isn't a code-completion tool bolted onto an IDE. IBM launched it in April 2026 as a multi-agent system meant to handle the full software lifecycle: planning a change, writing the code, testing it, deploying it, and modernizing legacy systems written in Java, COBOL, PL/I, and RPG. A July 9 update added specialized multi-agent workflows aimed specifically at modernization work, according to IBM's newsroom. The self-hosted version keeps Bob's core pieces intact, including its BobShell interface and parallel tool calling, and for models run on a customer's own hardware, IBM currently supports Nvidia's Nemotron and Poolside's Laguna, with hybrid setups available for teams that want to mix local and external models. [Anthropic's COBOL Tool Rattled IBM, But AI Migration Still Hides Silent Bugs](https://startupfortune.com/anthropics-cobol-tool-rattled-ibm-but-ai-migration-still-hides-silent-bugs/) AI coding agents can now translate decades-old COBOL into Java that compiles cleanly and passes its tests, then silently corrupt a database in production because they miss dependencies buried in old copybooks. Anthropic's push into COBOL modernization rattled IBM's stock in February 2026, and Gartner now predicts most mainframe exit projects will... - [AI COBOL migration hidden bugs](https://startupfortune.com/anthropics-cobol-tool-rattled-ibm-but-ai-migration-still-hides-silent-bugs/) - [how to catch AI migration errors](https://startupfortune.com/anthropics-cobol-tool-rattled-ibm-but-ai-migration-still-hides-silent-bugs/) IBM has been running Bob on itself since before this announcement, and that's where the more interesting numbers show up. More than 80,000 IBM employees now use it, and surveyed users report an average 45% productivity gain across modernization, security, and new development work. On the IBM Instana team specifically, developers reported a 70% cut in time spent on selected tasks, worth about 10 hours a week per person. Those aren't hypothetical efficiency claims from a slide deck. They're IBM measuring its own workforce. The modernization numbers are the ones worth sitting with. One legacy modernization effort that IBM originally estimated at nine months with a team of 14 engineers was finished in three days using Bob. A separate case involving the consulting firm Blue Pearl saw a routine 30-day Java upgrade compressed into three days, saving more than 160 engineering hours, according to IBM's own case material. A nine-month project becoming a three-day one isn't a rounding error in an efficiency study. It's the kind of number that makes a CIO ask why their modernization backlog still exists. None of this means the self-hosted version will be painless to run. Air-gapped deployment means a bank's own infrastructure team now has to patch, scale, and monitor an agentic system that used to be someone else's problem, and IBM's own hybrid option, letting Bob reach out to external model services for some workloads, quietly admits that fully sealed-off AI isn't always practical even for IBM's own customers. Still, the bet IBM is making is clear enough. Every major AI lab has spent 2026 racing to build bigger models in someone else's cloud. IBM looked at the wreckage from Hugging Face's intrusion and PocketOS's deleted database and decided the more valuable thing to sell regulated industries isn't a smarter agent. It's an agent that never has to leave the building. **Also read:** [IREN's AI pipeline tops 5 gigawatts, but Wall Street still argues the math](https://startupfortune.com/irens-ai-pipeline-tops-5-gigawatts-but-wall-street-still-argues-the-math/) • [Lumentum CEO warns laser shortage could outlast the AI chip crunch](https://startupfortune.com/lumentum-ceo-warns-laser-shortage-could-outlast-the-ai-chip-crunch/) • [Google launches four TPUs into orbit to test AI data centers in space](https://startupfortune.com/google-launches-four-tpus-into-orbit-to-test-ai-data-centers-in-space/) *This article is posted in [AI News](https://startupfortune.com/category/ai/), check it out for more related stories.* [Starbucks is quietly building the software it used to buy from IBM and Microsoft](https://startupfortune.com/starbucks-is-quietly-building-the-software-it-used-to-buy-from-ibm-and-microsoft/) Starbucks is building AI-assisted, in-house replacements for software it currently buys from Microsoft and IBM, aiming to cut its roughly $400 million annual software spend. The news sent IBM, ServiceNow, and Salesforce shares sliding in premarket trading while Microsoft held steady. - [Starbucks building in-house software replacements](https://startupfortune.com/starbucks-is-quietly-building-the-software-it-used-to-buy-from-ibm-and-microsoft/) - [enterprise software licensing cost reduction](https://startupfortune.com/starbucks-is-quietly-building-the-software-it-used-to-buy-from-ibm-and-microsoft/) ## Join the discussion [Open in the community →](https://startupfortune.com/community/) Almost there. Sign in and your reply posts straight away.