After paying $28B for Splunk, Cisco launched HyperShield to catch the AI wave

The world's largest networking-equipment maker, pushing cybersecurity as its growth engine as the public cloud erodes its traditional back-end business.

That security must be re-architected around AI — compressing vulnerability discovery-to-patch from days to minutes — or Cisco stays a legacy hardware vendor.

Cisco unveiled HyperShield on April 18, 2024: an AI-driven security architecture protecting applications, devices and data across data centers, clouds and physical locations. EVP Jeetu Patel insisted it is 'not a product, but a new architecture — the first version of something new', designed for a world of digital AI assistants like ChatGPT.

The launch builds on the $28B Splunk acquisition completed earlier in 2024 and on Cisco's Nvidia partnership for managing and securing AI infrastructure. Patel's math: a network vulnerability is exploited roughly four days after discovery, while patching averages 45 days — AI must compress that to minutes. Features include autonomous network segmentation and self-qualifying upgrades for critical infrastructure such as oil rigs, IoT devices and hospital MRI machines.

The Splunk deal bought data and observability; HyperShield is the story that turns it into an AI-era security platform.

Patel's exploit-window math — four days to exploit, 45 to patch — frames AI-speed defense as necessity, not feature.

It is Cisco's bid to be seen as a serious AI player alongside Microsoft, Google and Amazon.

A giant buys its way into a category, then must ship a plausible 'new architecture' before the market re-files it as legacy.

Competitors moved similarly: HPE announced large AI model integrations for its Aruba networking division, and Broadcom's VMware launched a tool for privacy-secure generative AI. Cisco shares still trailed the Nasdaq at publication.