# Artificial Intelligence for Cyberspace Operations

**R-2A activity** of project CY50H1 — Artificial Intelligence  
**Program element:** 0306250JCY — Cyber Operations Technology Support  
**Component:** Defense-Wide · **Budget Activity:** 7  
**Vintage:** President's Budget PB2027  
**Canonical URL:** https://hitchintel.com/programs/0306250JCY/CY50H1/a0  
**Parent:** https://hitchintel.com/programs/0306250JCY/CY50H1

## Summary

This activity requests $138.1M in FY2027, 100% of project CY50H1, up 2661% on FY2026. The R-2A exhibit describes it across FY2026–FY2027, including what the FY2027 money is planned to buy.

## What the FY2027 request buys

**FY2027 planned work.** With $138.068M, USCYBERCOM will scale and operationalize AI capabilities across all four thrust areas—ISR, Enhancing OCO, Enhancing DCO, and Integrated Foundational Activities—to deliver AI‑enabled effects at campaign‑level scale. This investment advances the Command’s strategic priority to integrate AI across JCWA and accelerate mission impact. Major FY 2027 initiatives include: • Replicating AI task forces across the Command to scale successful pilot outcomes and institutionalize AI enabled mission workflows. • Providing LLM access at multiple classification levels, enabling ISR, OCO, and DCO teams to leverage advanced analytic capabilities across operational environments. • Establishing an AI fabric to automate data flows, accelerate mission execution, and enhance operator effectiveness. • Integrating AI into the cyber workforce training pipeline, including incorporation into the Persistent Cyber Training Environment, ensuring CMF teams are trained to employ AI enabled capabilities. ISR Enhancements: • Expand AI/ML applications that improve ISR support to OCO and DCO missions. • Continuously adapt analytic models to evolving adversary TTPs. • Implement verification and validation mechanisms to ensure AI generated intelligence is accurate, trusted, and operator validated. OCO Enhancements: • Integrate agentic data triage, automated planning, mission dependency monitoring, and rapid target development. • Accelerate mission planning and reduce operator workload through AI enabled automation. • Increase the number and timeliness of operational options available to Commanders. • Prioritize AI enabled targeting of critical technologies used by adversaries and malicious cyberspace actors. DCO Enhancements: • Scale analyst capacity to identify malicious actors across the DoWIN, national security systems, and critical infrastructure. • Fuse cyber threat intelligence with partner agency holdings to drive prioritization of defensive actions. • Accelerate malware analysis in Hunt Forward Operations. • Prototype AI enabled protocol analysis capabilities for IT and OT environments. Integrated Foundational Activities: • Enhance C2, planning, training, and rehearsal of cyber operations through AI enabled capabilities. • Optimize data storage across classification levels to support performant AI models. • Implement MLOps capabilities to accelerate AI development and deployment. • Expand access to cloud based and generative AI models in operational environments. • Integrate Retrieval Augmented Generation and agentic AI frameworks. • Continue AI assurance activities to validate AI outputs and ensure operator trust.

**FY2026 to FY2027 change.** This funding request reflects the Command’s prioritization of scaling AI‑driven capabilities across the Joint Cyber Warfighting Architecture (JCWA) and the expanding scope of AI integration across USCYBERCOM missions. Additional resources will accelerate the transition of successful pilot capabilities into operational use, expand AI access across classification levels, and support the rapid development, deployment, and governance of AI tools essential to the Department of War and USCYBERCOM missions. This increase also reflects the growing urgency to apply AI at operational scale to counter rapidly advancing adversary capabilities.

## Before the request year

**FY2026 plans — current year.** $5.000M in funding will enable CNMF to continue executing an agile 90-day AI pilot cycle, a rapid evaluation framework that allows the Command to test, validate, and iterate on AI capabilities against real operational use cases. This approach ensures that only the most effective technologies advance toward operationalization while maintaining the flexibility to counter evolving adversary tactics. Key FY 2026 efforts include: • Rapid AI prototyping and validation focused on improving threat detection, automating data analysis, and accelerating decision making across CMF missions. • Operational testing of AI applications that reduce manual workload, enhance threat hunting efficiency, and increase mission throughput. • Early identification of integration challenges and development of best practices to support broader adoption across the Command. • Foundational AI activities, including deployment of cloud-based AI models in operational environments and prototyping pipelines for model provenance, security, and risk assessment, enabling safe and rapid adoption of advanced AI capabilities. These efforts ensure USCYBERCOM can quickly identify high value AI capabilities and transition them into mission workflows at speed. FY 2026 funding will also support select foundational activities, including deployment of cloud-based AI models in operational environments and prototyping pipelines for model provenance, security, and risk assessment. These activities enable safe, rapid adoption of more performant AI capabilities across the Command.

## Funding

| Fiscal Year | Estimate Type | Amount ($M) |
|---|---|---|
| FY2026 | Enacted | 5.0 |
| FY2027 | Request | 138.1 |

> Prior, current and budget year only — an R-2A activity carries no five-year plan. It sums exactly into its project in the request year and not necessarily in any other.

## Source & machine access

- **Source:** FY2027 Office of the Secretary of Defense RDT&E Budget Justification, Exhibit R-2A, PE 0306250JCY project CY50H1 (PB PB2027). Narrative is the government's own text.
- **No marks, no contractors at this grain** — congressional marks land on the program element and R-3 performers on the project.
- **MCP:** `mcp.hitchintel.com` — `budget_get_activity`.

*HitchAI is an independent intelligence service, not affiliated with the U.S. Department of Defense. Budget figures are requests/estimates, not obligations.*