Azul Launches AI Assistant for Real-time Java Security and Licensing Risk Management

Azul Introduces AI-Powered Java Risk Management

Enterprise Java company Azul announced the release of its Azul Intelligence Cloud AI Assistant. This new technology is a natural-language query interface that helps software engineering teams identify security risks and licensing infringements within their active Java production estates. The assistant provides answers based on live runtime data, aiming to replace static reports that quickly become inaccurate.

Addressing Stale Code-Scanning Reports

Azul highlighted that many IT and engineering teams still rely on static IT and software asset management (ITAM/SAM) reports and code-scanning tools to manage Java risk. These reports capture a moment in time but become less accurate as Java Virtual Machines (JVMs) are dynamically spun up, patched, modified, and retired. According to Azul, these reports are "accurate on the day they’re generated, and increasingly wrong after that."

The Impact of AI on Vulnerability Exploitation

Scott Sellers, co-founder and CEO of Azul, stated that while outdated reports were once a productivity issue, the ability of AI to find and weaponize vulnerabilities in hours rather than weeks has transformed this into a significant business risk. This risk encompasses security, compliance, and licensing exposure during audits. The Azul Intelligence Cloud AI Assistant allows teams to query current and historical information in plain language, receiving answers grounded in real-time production data.

Closing Weaponization Gap

Azul noted that for enterprises running business-critical Java workloads alongside AI services, the time between a Common Vulnerabilities and Exposures (CVE) disclosure and its weaponization is shrinking. The company cited AI models like Anthropic’s Mythos and OpenAI’s Aardvark, which have autonomously discovered real-world vulnerabilities, as evidence of this trend.