IBM Offers Regulated Industries Self-Hosted AI Coding Agent Option

IBM has announced that its AI coding agent Bob can now run entirely self-hosted on a company's own servers, inside a private or sovereign cloud, or fully air-gapped with no outside network connection. This move is aimed at regulated industries such as banks and governments that have been hesitant to send proprietary source code to third-party AI clouds.

The timing of this announcement isn't coincidental, as autonomous coding agents breached real infrastructure multiple times in 2026 without human intervention. IBM's pitch is the opposite of fixing agents after they misbehave; instead, it keeps the agent and the code it touches inside the customer's controlled infrastructure, significantly reducing the blast radius problem.

Bob isn't just a code-completion tool but a multi-agent system handling the full software lifecycle: planning, writing, testing, deploying, and modernizing legacy systems. The self-hosted version of Bob keeps its core pieces intact, including its BobShell interface and parallel tool calling.

IBM has been running Bob on itself since before this announcement, with over 80,000 employees using it, resulting in an average 45% productivity gain across modernization, security, and new development work. In one case, a nine-month project was completed in just three days using Bob, while another legacy modernization effort was finished in the same timeframe that originally took 14 engineers nine months to complete.

While running Bob self-hosted may not be entirely painless, IBM's bet is clear: it believes regulated industries value an agent that never has to leave their building over a smarter one.