# IT Management > Source: https://aiwiki.ai/wiki/it_management > Updated: 2026-05-13 > Categories: AI Tools & Products, Enterprise AI > From AI Wiki (https://aiwiki.ai), a free encyclopedia of artificial intelligence. Quote with attribution. *See also: [IT Management ChatGPT Plugins](/wiki/it_management_chatgpt_plugins)* **IT management**, sometimes broken out into **IT service management (ITSM)** and **IT operations (ITOps)**, is the set of practices, tools, and people that keep an organisation's information technology running. Modern IT management absorbed [machine learning](/wiki/machine_learning) for things like alert correlation, anomaly detection, and capacity forecasting under the banner of **[AIOps](/wiki/aiops)** starting around 2017, then went through a second, much louder revolution in 2023 when [generative AI](/wiki/generative_ai) and [large language models](/wiki/large_language_model) made it possible to summarise incidents, draft post-mortems, query telemetry in plain English, and run [virtual agents](/wiki/virtual_agent) that resolve a meaningful slice of help-desk tickets without a human in the loop. By 2025 every major IT vendor had shipped some form of AI assistant or agent, and the [ServiceNow](/wiki/servicenow) acquisition of [Moveworks](/wiki/moveworks) for $2.85 billion (announced 10 March 2025) made clear that the agentic AI layer over the service desk had become a real category rather than a feature. This article surveys how AI is used in IT management today, the platforms doing the work, and the failure modes that have already shown up in production. ## Overview IT management combines a few historically separate functions that AI has been steadily pulling together: * **Service management (ITSM):** ticketing, incident, problem, change, knowledge, and request management. Heritage vendors are [ServiceNow](/wiki/servicenow), BMC, Ivanti, Cherwell (now Ivanti), and HP/Micro Focus; cloud-first competitors include Atlassian Jira Service Management, Freshworks Freshservice, and Zendesk. * **IT operations (ITOps) and AIOps:** event correlation, root-cause analysis, anomaly detection, automated remediation. Specialists include BigPanda, Moogsoft (now part of Dell), Splunk IT Service Intelligence, Dynatrace Davis, and LogicMonitor. * **Observability:** logs, metrics, traces, and increasingly, profiling and frontend telemetry. Datadog, New Relic, Splunk, Dynatrace, Honeycomb, Grafana, and Elastic compete here. * **Network management:** monitoring, configuration, and troubleshooting of routers, switches, wireless access points, and SD-WAN fabric. Cisco, Juniper (now part of HPE), HPE Aruba, Arista, and Extreme are the main players. * **Endpoint and security operations (SecOps):** EDR, XDR, SIEM, and SOAR. Crowded with [Microsoft](/wiki/microsoft), [CrowdStrike](/wiki/crowdstrike), SentinelOne, Palo Alto Networks, Sophos, Trend Micro, and the Splunk and IBM SIEM platforms. * **Help desk and employee experience:** the worker-facing layer that turns service catalogs into conversation. Moveworks, Espressive, Aisera, and Cognigy built this space before the GenAI wave; Microsoft Copilot, ServiceNow Now Assist, and Freshworks Freddy now compete directly with them. * **Configuration management and infrastructure as code (IaC):** Ansible, Terraform, Pulumi, Chef, Puppet, and SaltStack. * **Cloud-specific operations:** the proprietary management stacks inside AWS, Microsoft Azure, and Google Cloud, increasingly fronted by AI assistants such as Amazon Q, Microsoft Copilot, and Google Gemini Cloud Assist. The consolidating force across these silos is the assistant layer, a conversational front end that reads telemetry, runs queries, drafts text, and in the more recent agentic systems, takes actions in the underlying platforms. Most enterprise rollouts started in 2023 or 2024, so the field is still figuring out the right scope, the right pricing model, and the right safety controls. ## History The phrase **AIOps** was coined by Gartner around 2016 to describe platforms that apply machine learning to IT operations data. The first generation of products focused on event correlation: ingest millions of alerts from monitoring systems, cluster them into a smaller number of meaningful incidents, and route the right ones to the right team. Moogsoft (founded 2012) and BigPanda (founded 2012) were the canonical early entrants. Established APM vendors like [Splunk](/wiki/splunk) added ML features to their existing analytics tools, and Dynatrace embedded its Davis AI engine across the platform. The second wave began with the [ChatGPT](/wiki/chatgpt) launch in November 2022, which forced every IT vendor with a roadmap to add a chat assistant. The earliest commercial implementations appeared in spring 2023: * [Atlassian](/wiki/atlassian) announced Atlassian Intelligence for Jira and Confluence on 19 April 2023, built on its own models plus [OpenAI](/wiki/openai) APIs. * Datadog announced Bits AI in beta at DASH on 3 August 2023. * Honeycomb launched Query Assistant, the first natural-language query tool for an observability platform, on 3 May 2023. * New Relic unveiled New Relic Grok (the assistant later renamed New Relic AI) on 2 May 2023 with a limited preview. * CrowdStrike introduced Charlotte AI on 30 May 2023. * Microsoft unveiled Security Copilot in March 2023 and reached general availability on 1 April 2024. ServiceNow's Vancouver release on 29 September 2023 was the first ITSM platform to ship a generative AI feature into general availability rather than into preview. The Washington, DC release in March 2024 made Now Assist for ITSM, CSM, and HRSD broadly available with summarisation, knowledge generation, and code generation skills. By late 2024 the conversation had moved from chatbots to agents: ServiceNow added the Now Assist Skill Kit and a library of pre-built AI Agents at World Forum events in autumn 2024, Atlassian shipped its Rovo agents into general availability on 9 October 2024, and Salesforce, BMC, Freshworks, and Pega all began describing themselves as agentic platforms. The two largest deals reshaped the competitive map. Cisco announced its $28 billion acquisition of Splunk on 21 September 2023 and closed it on 18 March 2024. IBM agreed to buy HashiCorp on 24 April 2024 for $6.4 billion in cash and closed the transaction on 27 February 2025. ServiceNow announced its $2.85 billion acquisition of Moveworks on 10 March 2025, completing it on 15 December 2025. ## ITSM copilots ITSM copilots are the most visible category because they sit directly inside the ticketing tool that IT staff already use. ### ServiceNow Now Assist [ServiceNow](/wiki/servicenow) is the dominant enterprise ITSM platform, with roughly 8,400 enterprise customers as of 2025. The company unveiled the Now Assist family at the Vancouver release on 20 September 2023 and made the first generative AI skills generally available in the ServiceNow Store on 29 September 2023. The Washington, DC release of March 2024 turned Now Assist for ITSM, Customer Service Management, and HR Service Delivery into broadly available products with skills for case summarisation, resolution suggestions, knowledge article generation, and chat-based search. The Yokohama release in 2024 introduced the **Now Assist Skill Kit**, a low-code tool for building custom GenAI skills against the platform's domain-specific Now LLM. Late in 2024 ServiceNow began shipping pre-built **AI Agents** for tasks like deflecting password resets, triaging incidents, and drafting change requests. Pricing is the same SKU model the company uses for Performance Analytics and Predictive Intelligence: per-user-per-month uplifts on Pro Plus, Enterprise Plus, and now Workflow Data Fabric tiers. ### Atlassian Intelligence and Rovo [Atlassian](/wiki/atlassian) added Atlassian Intelligence to Jira and Confluence on 19 April 2023, initially as a waiting-list beta in cloud-only deployments. The features included natural-language summaries of pages, automated test plans in Jira Software, and rewriting of customer responses in Jira Service Management. The deal with OpenAI provided the underlying language models. At Team '24 on 1 May 2024, Atlassian launched Rovo, a new AI teammate that combines enterprise search across Atlassian and third-party SaaS tools with a library of agents that automate workflows. Rovo reached general availability on 9 October 2024 at Team '24 Europe in Barcelona. Pricing was set at $20 per user per month on annual subscriptions and $24 per user per month for monthly billing, with consumption pricing later. At Team '25 the company reported Rovo had reached three million monthly active users and made baseline Rovo features available to all paid Atlassian users. ### BMC Helix and HelixGPT BMC, the former mainframe and ITSM heavyweight that went private in 2018, rebuilt its Helix platform around an agentic AI framework called **BMC HelixGPT**. The framework hosts persona-based agents like the HelixGPT Vulnerability Resolver and the HelixGPT Best Action Planner, runs across BMC Helix Service Management, Helix Operations Management, and Helix Discovery, and can be deployed on-premises or in cloud environments using the customer's preferred LLM (OpenAI, Microsoft Azure OpenAI, or Google Vertex AI). BMC's customer base is heavy in financial services, telecoms, and regulated public sector, where the on-prem option matters. ### Freshworks Freddy Freshworks layered its own AI brand, **Freddy**, across Freshservice (ITSM), Freshdesk (CX), and Freshsales (CRM). The Freddy AI Copilot launched as a free beta in mid-2023, then became a paid add-on at $29 per agent per month starting 5 February 2024. Late in 2024 Freshworks shipped Freddy AI Agent, a customer-facing autonomous agent that handles routine tickets and was credited with up to 50% deflection rates by early adopters. Freshworks's pitch is smaller and faster than ServiceNow or Atlassian, aimed at mid-market IT teams that want AI without a multi-quarter integration project. ### Other ITSM copilots Ivanti Neurons for ITSM added generative summarisation, ticket classification, and self-healing bots, with a fuller persona-based agentic experience entering customer preview in Q1 2026. SolarWinds expanded its AI features under the SolarWinds AI Service Agent brand. Zendesk announced Zendesk AI at Relate 2023 in May 2023 and has since rolled it into a separate Zendesk AI Advanced add-on aimed at customer-facing teams. Although Zendesk is more often associated with CX than ITSM, many small IT organisations use Zendesk as their internal help desk. ## AIOps platforms AIOps platforms ingest events and telemetry from monitoring tools and apply ML to compress, correlate, and prioritise them. The classic problem is alert storms: a single failed router can produce tens of thousands of downstream alerts, and the operations team needs one ticket, not a flood. | Platform | Vendor | Founded / launched | Notes | |---|---|---|---| | Moogsoft | Dell (acquired Sept 2023) | 2012 | Pioneer of event correlation AIOps. Dell announced acquisition 19 July 2023, closed 17 September 2023. Moogsoft had raised more than $92 million from venture investors before the deal. | | BigPanda | BigPanda (private) | 2012 | Series D of $190 million in January 2022 led by Advent International and Insight Partners at a $1.2 billion valuation. Focuses on incident intelligence and automation. | | Splunk IT Service Intelligence (ITSI) | Cisco (acquired Splunk March 2024) | 2015 (ITSI launch) | ML for adaptive thresholds, anomaly detection, and predictive incident prevention up to 30 minutes ahead. | | Splunk AI Assistant for SPL | Cisco/Splunk | June 2024 GA | Natural-language to Search Processing Language; later extended to Splunk Enterprise via cloud-connected option. | | Dynatrace Davis and Davis CoPilot | Dynatrace | Davis 2017, CoPilot announced 25 July 2023, GA 10 October 2024 | Hypermodal AI combining predictive, causal, and generative AI on a single platform. | | PagerDuty AIOps and PagerDuty Advance | PagerDuty | AIOps 2019, GenAI features 2024 | Operations Cloud claims an 87% incident reduction for AIOps customers. Advance bundles AI Assistant, AI status updates, AI postmortems, and Automation Co-Author. | | LogicMonitor Edwin AI | LogicMonitor | June 2024 | Agentic AIOps platform announced at Collision 2024 in Toronto on 18 June. Marketed as reducing alert noise by up to 80%. | | ScienceLogic SL1 with Skylar AI | ScienceLogic | SL1 long-standing, Skylar AI 2024 | Adds GenAI assistants for incident analysis on top of the SL1 platform. | | IBM AIOps (Cloud Pak for Watson AIOps, later Instana) | IBM | 2020 onward | Built on Watson and the Instana observability platform IBM acquired in 2020. | AIOps platforms now compete heavily with the observability platforms below, which have added similar correlation and AI features inside their own UIs. ## Observability AI Observability platforms collect logs, metrics, traces, and other telemetry from applications and infrastructure. The generative AI race here started in May 2023 and is still being run. | Product | Vendor | Launch | Capability | |---|---|---|---| | Bits AI | Datadog | 3 August 2023 beta | Conversational assistant for question answering, incident management, and code fixes; expanded with Bits AI SRE agent in October 2024. | | New Relic AI (formerly Grok) | New Relic | 2 May 2023 | Industry-first GenAI observability assistant; uses OpenAI LLMs and the New Relic telemetry data platform. | | Query Assistant | Honeycomb | 3 May 2023 | First fully executing natural-language querying for observability, built on OpenAI. | | Davis CoPilot | Dynatrace | Announced 25 July 2023, GA 10 October 2024 | Generative AI assistant for Dynatrace Query Language; converts plain English to DQL and builds dashboards and notebooks. | | Mo Copilot | Sumo Logic | 2024 | Conversational AI inside the Sumo Logic platform; query generation, summarisation, and chart suggestions. | | Sentry Seer and Autofix | Sentry | Autofix launched March 2024 | AI debugging agent that reads stack traces, locates the root cause, and drafts a code fix. Sentry rebranded the suite as Seer in 2024. Sentry uses OpenAI and Anthropic models. | | Grafana Cloud AI | Grafana Labs | Throughout 2024 | LLM-powered features across Grafana Cloud including query suggestions and incident reports. | | Elastic AI Assistant | Elastic | 2023 onward | GenAI assistant for Elasticsearch and the Observability and Security solutions. | | Splunk AI Assistant for SPL | Cisco/Splunk | 11 June 2024 GA | Generates SPL queries from natural language and explains Splunk concepts. | Observability and AIOps are converging quickly. Datadog now positions Bits AI SRE as a full incident-management agent; Dynatrace's Davis CoPilot crosses observability, security, and application security; Splunk under Cisco has rolled together AI Assistant for SPL, Splunk SOAR automation, and Splunk ITSI under the same brand. Customers buying any of these platforms in 2025 are usually buying the AI layer with it. ## Network AI Networking has been quietly applying machine learning since the early 2000s under names like adaptive radio resource management. Modern Network AI focuses on three things: wireless performance, troubleshooting that crosses the wired/wireless/SD-WAN boundary, and a conversational front end for network engineers. ### Cisco [Cisco](/wiki/cisco) is the largest networking vendor by revenue. Its AI strategy spans several brands: the **Cisco AI Assistant** for Webex collaboration; **ThousandEyes** AI for digital experience monitoring (Cisco bought ThousandEyes in 2020 for around $1 billion); **Cisco Networking Cloud AI Assistant** for Meraki and Catalyst products; and **Cisco AI Defense** for security. At Cisco Live 2024 in Las Vegas the company announced new AI-powered innovations across collaboration, networking, and security, including an expanded Cisco AI Assistant and tighter integration between ThousandEyes and the Webex devices. The $28 billion Splunk acquisition extended the AI story into observability and security operations. ### Juniper Mist (now HPE Juniper Networking) Juniper Networks bought Mist Systems in April 2019 for $405 million in cash and assumed equity awards. Mist had pioneered an AI-native wireless LAN architecture and introduced the conversational assistant **Marvis** in 2018, before LLMs were a category. After the acquisition Juniper extended Mist AI across its wired switching and SD-WAN portfolio (Juniper acquired SD-WAN vendor 128 Technology in 2020). [HPE](/wiki/hpe) agreed to buy Juniper for $14 billion in January 2024 and the deal closed in July 2024 after the US Department of Justice settled antitrust concerns by requiring divestitures. Mist AI is now the centre of HPE's AI-native networking story alongside HPE Aruba Networking Central. ### HPE Aruba Networking HPE Aruba Networking expanded its AIOps capabilities throughout 2024 by integrating multiple generative AI LLMs inside HPE Aruba Networking Central. Releases in September 2024 added AI-powered security observability, third-party device monitoring (using OpsRamp, another HPE acquisition), behavioural analytics for network detection and response, and a generative AI search experience. HPE's training data lake includes telemetry from more than 4.6 million network-managed devices and more than 1.6 billion unique client endpoints. ### Arista AVA Arista Networks launched **AVA (Autonomous Virtual Assist)** in 2021 as a security-and-network AI platform built partly on the Awake Security technology Arista acquired in 2020. AVA Sensor inspects packet metadata, applies entity behavioural analysis, and feeds the results into the CloudVision management platform. Arista positions AVA as an alternative to traditional SIEM for network-first organisations. ### DriveNets and others DriveNets, an Israeli network software vendor, used machine learning for capacity planning across its disaggregated network operating system; the company became one of the named providers powering AI training networks for hyperscalers. Several startup network AI vendors (Selector AI, NetBrain, Forward Networks) compete on intent-based networking, change verification, and digital twin simulation. ## Endpoint and SOC AI The security operations centre (SOC) was one of the first IT functions to feel labour-market pressure, and it was an obvious target for GenAI assistants. The platforms below are positioned more for security than IT, but in most enterprises the SOC reports up through IT. ### Microsoft Security Copilot [Microsoft](/wiki/microsoft) Copilot for Security reached general availability on 1 April 2024 as a consumption-priced service billed in Security Compute Units (SCU) at roughly $4 per hour. Microsoft positions it as the assistant layer over the Defender XDR suite, Microsoft Sentinel SIEM, Entra ID, and Intune endpoint management. Microsoft cites a study showing experienced analysts working 22% faster on common tasks while increasing accuracy by 7% when using Copilot. The product supports prompts in eight languages and a multilingual interface in 25 languages. ### CrowdStrike Charlotte AI [CrowdStrike](/wiki/crowdstrike) introduced Charlotte AI on 30 May 2023 and made it broadly available with the **Raptor** Falcon platform release at Fal.Con 2023 in September 2023. Charlotte is built on the Falcon data lake and powered by [Amazon Bedrock](/wiki/amazon_bedrock) underneath. CrowdStrike later shipped Charlotte AI Detection Triage and Charlotte AI Agentic Response, agentic features that triage detections and suggest containment actions. Charlotte sits inside the Falcon console and accepts natural-language questions in English and dozens of other languages. ### SentinelOne Purple AI SentinelOne launched **Purple AI** on 24 April 2023 in early access and made it generally available on 9 April 2024. Purple AI runs queries in PowerQuery (SentinelOne's own language), generates investigation summaries, and recommends next steps. SentinelOne later rebranded Purple AI as an autonomous SOC analyst, framing it as moving beyond an assistant into agentic threat hunting. ### Other endpoint and SOC AI * Palo Alto Networks introduced Precision AI and Cortex XSIAM, which apply machine learning to detection and response across its SOC platform. * Sophos AI applies deep learning to malware classification and runs as part of the Sophos Intercept X and MDR products. * Splunk SOAR (formerly Phantom, acquired by Splunk in 2018) combined automation playbooks with Splunk AI Assistant in 2024. * Trend Micro Vision One adds Companion, a GenAI assistant for the platform. * IBM QRadar Suite added Watsonx-powered features in 2023 and 2024 before IBM moved Watsonx for Cybersecurity into the Cloud Pak for Watson AIOps and SIEM products. ## Helpdesk AI The employee-facing help desk has been a magnet for AI because so much of its work is repetitive: password resets, software requests, distribution-list changes, onboarding tasks, and questions that boil down to looking up a knowledge article. Pre-GenAI vendors built virtual agents on intent classification and dialogue trees; the GenAI generation runs on LLMs and retrieval-augmented generation against the customer's knowledge base. ### Moveworks (now part of ServiceNow) **Moveworks** was the canonical pre-GenAI employee-experience AI company. Founded in 2016 by Bhavin Shah and Vaibhav Nivargi, it raised about $315 million across five rounds, including a $200 million Series C in 2021 that valued the company at $2.1 billion. Moveworks's pitch was an AI assistant that sat inside Slack, Microsoft Teams, or the browser and resolved a meaningful share of IT, HR, and facilities tickets autonomously. Customers included Hearst, Instacart, Siemens, Toyota, and Unilever. ServiceNow announced its agreement to buy Moveworks on 10 March 2025 for $2.85 billion in cash and stock, the largest acquisition in ServiceNow's history. The deal closed on 15 December 2025 after regulatory review. ServiceNow's stated plan is to combine Moveworks's conversational AI front end and enterprise search with the Now Platform's workflow and execution layer, effectively giving every ServiceNow customer a fully built employee assistant rather than expecting them to assemble one from Now Assist skills. ### Espressive Barista, Aisera, and Cognigy Espressive's Barista virtual support agent has been on the market since 2017. Aisera (founded 2017 in Palo Alto by Muddu Sudhakar and Christos Tryfonas) markets an AI service desk and AIOps platform with persistent emphasis on autonomous resolution; the company raised about $90 million in a 2022 Series D and continued to add customers in 2023 and 2024. Cognigy, based in Düsseldorf, focuses on customer-experience contact centres but is used inside IT for internal help desks at some European enterprises. Each of these vendors has been forced to redefine itself in a market where Microsoft, ServiceNow, and Atlassian are giving away conversational assistants as part of existing seats. ## Configuration management and IaC AI Configuration management and infrastructure as code are different beasts from ITSM. Adoption of AI here is mostly about code generation, not ticket handling. * **Red Hat Ansible Lightspeed with IBM watsonx Code Assistant** went generally available on 1 November 2023. It generates Ansible playbook tasks from natural-language descriptions and uses Red Hat and IBM's domain-trained code models. * **HashiCorp** added a generative AI assistant to Terraform Cloud (now HCP Terraform) for explaining and generating configuration. After IBM completed its $6.4 billion acquisition of HashiCorp on 27 February 2025, the assistant is being rolled into IBM's wider automation portfolio alongside Ansible Lightspeed. * **Pulumi Insights**, launched on 13 April 2023, applied LLMs to cloud infrastructure search and analytics. **Pulumi Copilot** followed in 2024 as a chat interface inside Pulumi Cloud that understands the company's full provider catalog (over 160 clouds and SaaS providers). Pulumi later branded its agentic SRE product **Pulumi Neo**. * **Chef Inspec** and **Puppet** added LLM-based remediation suggestions, though both products have lost share to Terraform and Ansible since the second half of the 2010s. * **Cycode, Snyk, Wiz**, and other developer security tools added AI-assisted fixes for IaC misconfigurations. ## Cloud-specific AI The hyperscalers each shipped a conversational front end for IT operators on their own clouds. * **Amazon Q** was previewed at AWS re:Invent on 28 November 2023 and reached general availability on 30 April 2024 across two main editions: Amazon Q Developer (which absorbed CodeWhisperer) and Amazon Q Business. Amazon Q Developer is embedded in the AWS Management Console, the Q chat in Slack and Teams, IDEs, and the Amazon Q Console plugin. AWS continues to operate Amazon DevOps Guru, the pre-GenAI ML-powered operational issue detector launched in preview in December 2020 and made GA on 4 May 2021. * **Microsoft Azure AI** layers Copilot in the Azure portal, GitHub Copilot for Azure, Microsoft Copilot for Security, and Microsoft Copilot in the Microsoft 365 admin centre. Azure Advisor remains the ML-powered recommendation engine for cost, security, and reliability. * **Google Cloud** ships [Gemini](/wiki/gemini) Cloud Assist, Gemini Code Assist, and Duet AI (the prior brand) for cloud operations. Google Cloud Recommender is the pre-GenAI recommendation engine for IAM and cost. Vertex AI Agent Builder is used by some customers to build IT-management agents on Google Cloud. Each of these AI assistants is implicitly part of the cloud-management lock-in story. A Q-built workflow only runs on AWS, a Gemini agent only knows Google Cloud, and the SRE who learns Microsoft Copilot for Azure is one step further from being able to switch. ## Notable acquisitions The consolidation wave from late 2023 through 2025 was the biggest in IT management since the early 2010s. | Deal | Acquirer | Target | Announced | Closed | Price | |---|---|---|---|---|---| | Mist Systems | Juniper Networks | Mist Systems | 25 March 2019 | 1 April 2019 | $405 million | | Moogsoft | Dell Technologies | Moogsoft | 19 July 2023 | 17 September 2023 | Not disclosed | | Splunk | Cisco | Splunk | 21 September 2023 | 18 March 2024 | $28 billion | | Juniper Networks | HPE | Juniper Networks | 9 January 2024 | 2 July 2024 (close) | $14 billion | | HashiCorp | IBM | HashiCorp | 24 April 2024 | 27 February 2025 | $6.4 billion | | Moveworks | ServiceNow | Moveworks | 10 March 2025 | 15 December 2025 | $2.85 billion | IBM's HashiCorp deal faced a phase-one review by the UK Competition and Markets Authority that concluded on 25 February 2025 without referral to a phase-two investigation. Cisco's Splunk deal closed in only six months. HPE's Juniper deal cleared the US Department of Justice after agreeing to specified divestitures. ## Concerns The single most cited cautionary tale in the AI-meets-IT-Ops conversation is the **CrowdStrike Channel File 291 incident** on 19 July 2024. A faulty Rapid Response Content update to the Falcon Sensor on Windows triggered a kernel-mode crash that put roughly 8.5 million Windows systems into a bootloop. Airlines, banks, hospitals, broadcasters, retailers, and governments were all affected; CrowdStrike's own root cause analysis attributed the failure to an out-of-bounds memory read in the Windows sensor client triggered by Channel File 291, which had passed validation only because of a bug in the content verification software. The incident was not caused by generative AI, and the Falcon Sensor itself is largely a machine-learning EDR product, but it became the prototype example of what happens when an autonomous IT-operations agent makes a wrong call at scale. CrowdStrike CEO George Kurtz testified before the US Congress on 24 September 2024. The incident accelerated regulatory interest in change management for security agents and reset expectations about how much automation enterprises will trust in production. Other recurring concerns include: * **Hallucinated answers in incident response.** GenAI assistants can confidently produce wrong root causes, wrong runbook steps, or wrong code patches. The cost of an incorrect remediation during a major incident is much higher than the cost of an incorrect autocomplete suggestion. * **Cost of LLM-augmented monitoring.** Token-priced AI features can dwarf the cost of the underlying observability data, particularly when assistants summarise every alert in real time. Several vendors (PagerDuty, Datadog, Splunk) have moved AI features to per-user-per-month or consumption pricing models partly to keep this predictable. * **Permissions and data exposure.** A copilot that reads every Confluence page, Jira ticket, and Slack message inherits whatever access the system gives it. Several Atlassian and ServiceNow rollouts in 2024 exposed sensitive HR or financial information to employees who could already access it through search but had never thought to look. Atlassian and ServiceNow have since invested in fine-grained permission scopes and data classification. * **Vendor lock-in.** AI assistants are an explicit lock-in strategy. Skills, agents, and prompt libraries built against Now Assist or Atlassian Rovo do not move with the customer if they switch platforms. * **Operational complacency.** Newer agents act on systems without continuous human review. Several site reliability teams reported in 2024 that engineers were skipping postmortems because the GenAI postmortem read fine, even when its causal claims were thin. * **Workforce impact.** Industry analysts (IDC, Gartner) project that GenAI will reduce L1 service-desk headcount by 20% to 40% by 2027 in early-adopter organisations, although many enterprises are reskilling those workers into automation engineering rather than cutting headcount outright. ## See also * [AIOps](/wiki/aiops) * [Generative AI](/wiki/generative_ai) * [Large language model](/wiki/large_language_model) * [Machine learning](/wiki/machine_learning) * [ServiceNow](/wiki/servicenow) * [Atlassian](/wiki/atlassian) * [Microsoft](/wiki/microsoft) * [CrowdStrike](/wiki/crowdstrike) * [Splunk](/wiki/splunk) * [Moveworks](/wiki/moveworks) * [Cisco](/wiki/cisco) * [Amazon Bedrock](/wiki/amazon_bedrock) * [Amazon Q](/wiki/amazon_q) * [Gemini](/wiki/gemini) * [Virtual agent](/wiki/virtual_agent) * [Enterprise AI](/wiki/enterprise_ai) ## References 1. ServiceNow Newsroom. "ServiceNow launches Now Assist for ITSM, CSM, HRSD, and Creator to embed generative AI across all workflows on the Now Platform." 20 September 2023. 2. CIO. "ServiceNow boasts industry-first gen AI general availability with Vancouver release of Now." September 2023. 3. ServiceNow Newsroom. "ServiceNow to extend leading agentic AI to every employee for every corner of the business with acquisition of Moveworks." 10 March 2025. 4. TechCrunch. "ServiceNow buys Moveworks for $2.85B to grow its AI portfolio." 10 March 2025. 5. Fortune. "ServiceNow buys Moveworks for $2.85 billion in cash and stock." 10 March 2025. 6. Moveworks. "ServiceNow completes acquisition of Moveworks." 15 December 2025. 7. TechCrunch. "Atlassian brings an AI assistant to Jira and Confluence." 19 April 2023. 8. Bloomberg. "Jira, Confluence to Use OpenAI for New Atlassian Chat, Coding Tools." 19 April 2023. 9. TechCrunch. "Atlassian launches Rovo, its new AI teammate." 1 May 2024. 10. TechCrunch. "Atlassian's Rovo AI is now generally available." 9 October 2024. 11. SiliconANGLE. "Atlassian announces general availability for Rovo generative AI assistant." 9 October 2024. 12. Cisco Investor Relations. "Cisco to Acquire Splunk, to Help Make Organizations More Secure and Resilient in an AI-Powered World." 21 September 2023. 13. CNBC. "Cisco makes largest ever acquisition, buying cybersecurity company Splunk for $28 billion in cash." 21 September 2023. 14. Bloomberg. "Cisco Closes $28 Billion Splunk Acquisition." 18 March 2024. 15. Cisco Newsroom. "Cisco Completes Acquisition of Splunk." 18 March 2024. 16. IBM Newsroom. "IBM Completes Acquisition of HashiCorp, Creates Comprehensive, End-to-End Hybrid Cloud Platform." 27 February 2025. 17. Microsoft Security Blog. "Microsoft Copilot for Security is generally available on April 1, 2024 with new capabilities." 13 March 2024. 18. TechRepublic. "Microsoft's Security Copilot Enters General Availability." April 2024. 19. CrowdStrike Press Release. "CrowdStrike Introduces Charlotte AI to Deliver Generative AI-Powered Cybersecurity." 30 May 2023. 20. CrowdStrike Press Release. "CrowdStrike Introduces Next Generation of the CrowdStrike Falcon Platform to Unlock the Future of Generative AI and XDR for All." 19 September 2023. 21. CrowdStrike Blog. "Channel File 291 Incident RCA is Available." 6 August 2024. 22. Wikipedia. "2024 CrowdStrike-related IT outages." Various dates. 23. Datadog Press Release. "Datadog Announces Bits, an AI Assistant to Help Engineers Quickly Resolve Application Issues." 3 August 2023. 24. New Relic Press Release. "Introducing New Relic AI, the Industry's First Generative AI Observability Assistant." 2 May 2023. 25. Honeycomb Blog. "Honeycomb Launches First-of-Kind Natural Language Querying for Observability Using Generative AI." 3 May 2023. 26. Dynatrace Press Release. "Dynatrace Expanding Davis to Deliver the Observability and Security Industry's First Hypermodal Artificial Intelligence." 25 July 2023. 27. Dynatrace News. "Announcing General Availability of Davis CoPilot: Your new AI assistant." 10 October 2024. 28. Splunk Blog. "Supercharge Insights with Generative AI: Splunk AI Assistant for SPL is now GA." 11 June 2024. 29. SentinelOne Press Release. "SentinelOne Revolutionizes Cybersecurity with Purple AI." 24 April 2023. 30. SentinelOne Blog. "Transform SecOps with Purple AI, Now Generally Available." 9 April 2024. 31. Dell Technologies Press Release. "Dell Technologies Announces Intent to Acquire Moogsoft." 19 July 2023. 32. SiliconANGLE. "Dell acquires venture-backed AIOps startup Moogsoft." 20 July 2023. 33. Network World. "Cisco completes $28 billion Splunk acquisition." 18 March 2024. 34. Constellation Research. "Atlassian Rovo AI additions go GA with consumption pricing on deck." October 2024. 35. LogicMonitor Press Release. "LogicMonitor Supercharges Observability with Edwin AI, a Generative AI Solution to Exponentially Scale IT Operations." 18 June 2024. 36. Red Hat Press Release. "Red Hat Launches Red Hat Ansible Lightspeed with IBM watsonx Code Assistant for AI-Driven Enterprise IT Automation." 1 November 2023. 37. Pulumi Press Release. "Pulumi Launches 'Pulumi Insights', Intelligence for Infrastructure as Code." 13 April 2023. 38. Pulumi Blog. "Introducing Pulumi Copilot: Intelligent Cloud Management." 2024. 39. AWS Press Release. "AWS Announces Amazon DevOps Guru." 1 December 2020. 40. AWS Press Release. "AWS Announces General Availability of Amazon DevOps Guru." 4 May 2021. 41. Amazon Press Release. "Amazon Q Developer Reimagines How Developers Build and Operate Software With Generative AI." 30 April 2024. 42. Mist Systems. "Mist Will Join Juniper Networks to Accelerate AI for IT Adoption." March 2019. 43. Juniper Networks. "Juniper Networks Announces Intent to Acquire Mist Systems to Bring AI to IT, Delivering on Promise of Software-Defined Enterprise." 25 March 2019. 44. HPE Press Release. "HPE Expands AI-Powered Automation, Introduces Monitoring for Third-Party Devices and End-User Experience From HPE Aruba Networking Central." September 2024. 45. PagerDuty Blog. "Generative AI for the PagerDuty Operations Cloud." 2024. 46. CISA. "Widespread IT Outage Due to CrowdStrike Update." 19 July 2024. 47. The Register. "Cisco closes $28 billion Splunk acquisition." 19 March 2024. 48. Zendesk Newsroom. "ZENDESK RELATE 2023: Zendesk announces powerful AI designed exclusively for intelligent CX." 10 May 2023. 49. Freshworks Blog. "Unlock IT Productivity with Freddy AI Copilot." 2024. 50. BMC Helix. "BMC HelixGPT product page." Retrieved 2025. 51. BigPanda. "BigPanda Raises $50 Million in Series C Funding." 21 November 2019. 52. VentureBeat. "AIOps platform BigPanda nabs $190M in fresh funding." January 2022. 53. ServiceNow Community. "ServiceNow Washington, D.C. release notes." March 2024.