IBM brings its Bob coding agent inside the firewall for regulated companies

IBM has introduced self-hosted deployment for Bob, its agentic software development platform, letting regulated companies run the AI coding agent inside their own firewalls rather than on a public platform, as reported by Forbes.

Under the new option, Bob can run on-premises and in private-cloud, sovereign-cloud, and fully air-gapped environments. IBM says that in these setups organizations keep control of their code, data, and workflows.

Bob is positioned as more than code completion. IBM describes it as an agentic platform for software delivery and modernization, aimed at applying AI across the software engineering process rather than just generating snippets.

Data sovereignty and governance are the core pitch. For banks, healthcare providers, and government agencies, sending source code, internal data, or workflows outside the corporate boundary is often a compliance non-starter, so the ability to run inside existing infrastructure can decide whether a deal happens at all.

The timing also lands on a sensitive industry nerve. Recent security incidents involving AI coding agents, from a deleted database to an infrastructure breach, have pushed enterprises to weigh isolation and permission controls more heavily before adopting autonomous coding tools.

Moving the agent inside the firewall hands the security boundary back to the customer's own network and identity systems. That is a familiar IBM play for large enterprises and governments: trade model-only competition for controllability and trust.

What to watch is how deployments take shape, including how enterprises allocate compute for air-gapped setups, how Bob integrates with existing DevOps pipelines, and how quickly self-hosted installs keep pace with cloud feature updates. Those details will decide how far this approach penetrates regulated markets.