IBM has announced the general availability of three new IBM Z software offerings that strengthen security operations, simplify certificate management, and improve database administration through AI-assisted automation. The releases reflect IBM’s continued focus on supporting mission-critical workloads running on IBM Z and LinuxONE environments as enterprises address increasingly complex security, compliance, and operational requirements.
IBM positions the new tools alongside its broader security initiatives, including Project Glasswing and Project Lightwell, as organizations face evolving cyber threats and growing regulatory demands. The company noted that enterprises continue to rely on IBM Z for highly sensitive workloads, where platform resiliency and availability remain key requirements.
IBM zSecure Detection
IBM zSecure Detection is designed to improve threat monitoring and incident response on z/OS environments. The software provides continuous visibility into IBM Z activity and is intended to help security teams identify indicators of ransomware, suspicious behavior, and other potential threats across the platform.
Beyond basic monitoring, zSecure Detection combines AI-driven access anomaly detection, network insights, and automated response to flag behaviors such as privilege escalation, unusual dataset access, suspicious command execution, and anomalous cryptographic activity. It also introduces automated network micro-segmentation that builds policies from observed communication patterns to limit lateral movement, and it feeds near-real-time alerts into existing SIEM workflows. IBM said the offering is intended to strengthen the overall security posture as threat actors increasingly target critical enterprise systems.
IBM zSecure Secret Manager
IBM also introduced IBM zSecure Secret Manager, a new solution focused on managing certificates and secrets for IBM Z and LinuxONE deployments.
As certificate lifecycles continue to shorten, organizations face growing operational challenges in tracking, renewing, and managing certificates, a problem set to intensify as the industry moves toward TLS certificate renewal every 47 days. Powered by IBM Vault Self-Managed for Z and LinuxONE as the certificate authority, the solution uses a PKI secrets engine to deliver policy-driven, automated certificate renewal across z/OS environments, helping head off certificate-driven outages caused by expired certificates.
IBM said the software is designed to reduce administrative overhead from fragmented certificate management processes while providing a more centralized approach to secrets and certificate lifecycle management.
IBM Z Database Assistant
The third release, IBM Z Database Assistant, brings agentic AI capabilities to database administration workflows on IBM Z.
Built on a set of DBA-centric AI agents for Db2 and IMS on the mainframe, the software automates routine work such as provisioning, index rebuilds, and log backups, while adding intelligent SQL tuning, deadlock and timeout diagnostics, and continuous object health monitoring. It pairs those agents with context-driven dashboards and natural language interaction. IBM describes the platform as proactive, autonomous, and intelligent, designed to shift database teams from reactive troubleshooting to higher-value work.
The announcement reflects a broader trend of incorporating AI-driven automation into enterprise infrastructure management, particularly in environments where data integrity, availability, and operational consistency are critical.
Supporting Modern IBM Z Operations
The latest additions expand IBM’s software portfolio for IBM Z environments at a time when enterprises are balancing AI adoption, hybrid infrastructure strategies, and increasingly sophisticated cybersecurity threats. With organizations continuing to run core business applications on IBM Z, IBM is focusing on tools that help operations, security, and database teams manage and protect critical workloads while maintaining the platform’s traditionally high availability and resiliency standards.
Amazon