BMC Advances Enterprise AI with BMC AMI Agentics and Control-M
BMC Software has announced BMC AMI Agentics and new Control-M capabilities to help enterprises put AI to work across critical operations while retaining human control. The innovations bring specialized mainframe intelligence to operational and database workflows and extend universal orchestration across application, data, and AI workflows.
BMC AMI Agentics helps teams investigate issues, understand probable causes, and determine next steps using mainframe expertise and operational context. Control-M connects AI-driven processes to the workflows on which businesses depend, helping customers coordinate complex work, validate data, and recover from disruptions across hybrid environments.
“AI must earn the right to run your business,” said Ram Chakravarti, chief technology officer at BMC. “BMC helps enterprises put AI agents to work while retaining human control, turning decades of human expertise into actionable intelligence without compromising operational predictability. AI earns trust in critical operations by being open by design, governed by default, and human-controlled.”
Agentifying the Mainframe with BMC AMI Agentics
Enterprise AI needs access to the data, transactions, and expertise that underpin the business. On the mainframe, much of that knowledge resides within specialized teams and established operational workflows. BMC is agentifying the mainframe by making that expertise available through purpose-built agents that help teams investigate, analyze, and recommend actions within governed boundaries.
BMC AMI Agentics for Data and BMC AMI Agentics for Ops embed domain-aware AI into existing database and systems administration workflows:
BMC AMI Agentics for Data: helps teams investigate Db2 and IMS issues, explain findings, and guide performance and optimization decisions. Specialized capabilities include AI Reorg Advisor, SQL Workload Analyzer for IBM Db2, Deadlock Advisor in BMC AMI Log Analyzer, and IMS Exception Advisor in BMC AMI Database Advisor.
BMC AMI Agentics for Ops: helps operations teams investigate CPU spikes, understand legacy REXX automation, and identify probable causes within alerts, making specialized operational knowledge easier to apply.
The approach makes AI mainframe-native by grounding it in mainframe expertise, operational context, and enterprise controls, helping customers apply that intelligence across the enterprise.
A G2 reviewer said: “The best thing about BMC AMI Ops is its ability to bridge the mainframe skills gap by moving traditional green-screen monitoring into modern, AI-driven observability.” – User in Airlines/Aviation
Additional BMC AMI capabilities support connected operations and modern developer workflows:
- Service discovery and enterprise collaboration: BMC AMI Service Discovery feeds verified z/OS configuration items into ServiceNow and other enterprise configuration management databases. BMC AMI Assistant brings mainframe knowledge across the estate into enterprise chat workflows.
- Synthetic test generation in beta: BMC AMI DevX Unit Test parses COBOL source code and copybooks within VS Code to create synthetic test data and scenario paths, helping developers reduce test preparation bottlenecks.
- Hybrid developer workflows in beta: Supported AI coding assistants, including Cursor, GitHub Copilot, and Claude Code, connect to BMC AMI DevX Code Pipeline. Developers can generate, promote, and deploy mainframe code from their chosen assistant, with operations running under their own mainframe permissions and recorded in the existing audit trail.
“Governance, not model capability, is what separates AI pilots from reliable execution. Closing that gap requires context, orchestration, and control across complex enterprise estates,” said Brent Ellis, vice president, AI and Workloads, IDC. “Delivering actionable AI enablement for the mainframe requires domain expertise often best provided by vendors dedicated to that ecosystem, such as BMC. Combining agentic AI with an established automation and orchestration platform provides a well-governed foundation for organizations looking for trusted outcomes at scale.”
Universal orchestration for the AI enterprise with Control-M
Control-M extends universal orchestration to AI-driven processes alongside the application, data, and business workflows enterprises already run. The latest capabilities help operations teams troubleshoot work, improve data quality, and coordinate execution across hybrid environments:
- Data Assurance: Available across Control-M SaaS and Control-M self-hosted, Data Assurance validates data as it moves through business workflows, helping teams detect quality issues before they affect downstream analytics, reporting, and AI initiatives.
- AI monitoring: Natural-language troubleshooting helps operations teams understand job and workflow dependencies, investigate root causes, and resolve issues faster.
- Expanded integrations: Recent additions include Amazon Bedrock AgentCore, Argo Workflows, SAP Build Process Automation, Workato, IBM MQ, Oracle JD Edwards EnterpriseOne, AWS Auto Scaling Groups, and GCP Managed Instance Groups, extending orchestration across AI, application, and infrastructure workflows.
A PeerSpot reviewer said: “The AI-assisted workflow creation is fantastic, as Control-M capabilities include AI-assisted creation of workflows from natural language intent, which is useful for moving towards AI-first operations.” – Delivery Manager, tech vendor.
Building with the AI ecosystem
BMC uses LangGraph technology within BMC AMI Agentics to combine agentic workflows with mainframe intelligence and enterprise controls. Separately, Control-M integrates with LangGraph to orchestrate AI-driven workflows with visibility and automated recovery.
“We are pleased that BMC is leveraging LangChain in order to bring unique mainframe expertise and intelligence into enterprise AI domains,” said Harrison Chase, CEO of LangChain.
- For more information on BMC’s approach to “Agentifying the Mainframe,” see (SVP and GM of Intelligent Z Optimization and Transformation) Tarun Chopra’s recent blog on the subject.
Source: BMC Software
Introducing IBM Z Atlas: Navigating Infrastructure Complexity with System Intelligence
IBM Z environments are more interconnected than ever. Applications, middleware, infrastructure, security controls, and operational processes all depend on one another, making even routine changes difficult to assess. As organizations accelerate AI adoption, application modernization, hybrid cloud integration, and regulatory transformation, understanding how the entire IBM Z environment is interconnected has become increasingly important. Many mainframe teams still rely on manual analysis, fragmented tooling, and institutional knowledge to understand dependencies and evaluate risk across teams, creating a manual process that is slow and ineffective.
As experienced professionals retire and modernization initiatives accelerate, the siloed knowledge problem is magnified with mainframe teams having trouble measuring the full impact of their changes before they reach production.
Today, most Z teams can see pieces of their environment, but the next evolution of IBM Z management requires an end-to-end view of how the entire stack works together and turning that data into actionable intelligence. Without a unified view spanning infrastructure, operations, and applications, Z teams are forced to manually assemble context from multiple tools and sources. Organizations looking to modernize their mission-critical systems, while maintaining the reliability of IBM Z, need a faster, simpler, and more intelligent approach to understanding and validating their environment without inviting the possibility of system downtime.
To address this need, IBM has announced IBM Z Atlas, the industry-first Z Software offering that is intended to address the need for a total Z system intelligence and change orchestration layer across the z/OS environment.
IBM Z Atlas is designed to create a unified understanding of the IBM Z environment by continuously discovering relationships across infrastructure, software, middleware, applications, and operational processes. This system intelligence is visualized into a dynamic topology that gives teams a common view of their Z environment and dependencies. IBM Z Atlas uses that context to reduce the manual effort of tasks like patch management, regulatory response, and sharing system knowledge across every team, from systems programmers to application developers.
IBM Z Atlas eliminates the leading cause of unplanned z/OS outages — changes that aren’t proven to be safe — by mapping how a change impacts the z/OS stack by testing and validating it. This design accelerates clients’ modernization efforts by keeping experts in control and giving every practitioner, in operations or development, the same shared Z system visibility to reduce risk.
As IBM Z environments continue to evolve, teams need more than visibility into individual domains. They need the tools and institutional knowledge to change quickly when the business demands it. That’s why we’re excited to introduce IBM Z Atlas, so mainframe teams can modernize with confidence and speed.
IBM Z Atlas’ system intelligence is built on a foundation of automated discovery, topology modeling, dependency analysis, natural-language interactions, and AI-powered workflows to create impact assessments and change evidence. Together, these capabilities are intended to create a continuously updated understanding of the IBM Z environment and the relationships between its components.
For example, z/OS system programmers can use this solution to evaluate how a middleware upgrade might affect dependent applications, identify related infrastructure and operational processes that may require validation, determine which systems should be included in a test plan, or coordinate validation activities across application, infrastructure, and operations teams.
Whether planning a software update, validating a modernization initiative, preparing change artifacts for an audit, responding to regulatory requirements, or analyzing environment drift, IBM Z Atlas intends to provide the trusted context Z clients need so they can make informed decisions faster while reducing by risk and keeping humans in control.
While change orchestration is an important first focus, the broader vision for IBM Z Atlas is to establish the shared intelligence layer that will enable Z teams to understand, manage, govern, and optimize their IBM Z environments through natural-language experiences and AI-assisted workflows.
IBM Z Atlas goes beyond individual applications and specific domains. It elevates the broader IBM Z Software portfolio through shared Z system intelligence that sits across development and operational workflows with a common understanding of the environment and the changes being made within it.
This solution is intended to bolster organizations by providing unified system intelligence across multiple domains to help teams ship faster and with less risk. The early results include:
- Reducing system context gathering time by 60-80%
- Decreasing detailed impact analysis and comprehensive test planning activities from hours to minutes
- Accelerating provisioning and test generation from weeks to hours
- Generating change evidence that reduces manual tracking effort by hours.
These efficiencies can help Z teams spend less time collecting information and coordinating activities so they can focus on modernizing and innovating their platforms.
Source: IBM
Rocket Software Selects 23 Projects to Compete at Rocket.Build 2026 Finals in London
Rocket Software has announced the 23 projects advancing to the Rocket.Build 2026 Finals, taking place November 3-5 in London. More than 650 innovators from 14 countries submitted over 230 projects, demonstrating the scale, ingenuity, and global collaboration driving the next generation of AI-powered solutions across the Rocket Software ecosystem.
Rocket.Build has grown from an internal hackathon into a global innovation program that brings together employees, customers, partners, and students to solve real-world challenges and create meaningful impact. Launched in 2014 to spark product innovation, the program now gives participants across Rocket Software’s global ecosystem a forum to experiment with new technologies and turn ideas into solutions to benefit customers and the broader community. This year’s program challenged participants to explore how AI and Rocket Software’s portfolio can help customers realize value faster, simplify mission-critical environments, and accelerate modernization. Projects were developed around three themes:
- Transforming Customer Outcomes: Creating AI-powered experiences that help customers deliver faster, clearer and more intuitive outcomes for their end users.
- Reinventing How Work Gets Done: Using AI and modern technology to simplify workflows, reduce operational overhead, and help technical and business teams work more effectively.
- Unlocking Value Through Cross-Product Innovation: Bringing Rocket products and data together to create new capabilities through shared insights, connected workflows and product synergy.
“Rocket.Build has become more than an opportunity to experiment. It’s a way for our teams to turn bold ideas into innovation grounded in the challenges our customers are trying to solve,” said Neil Fowler, SVP of Software Engineering, Hybrid Cloud. “This year’s finalists show how AI can be applied in practical ways across our portfolio to simplify complex environments, improve how work gets done, and create better experiences. Their projects reflect what’s possible when we combine experimentation with deep expertise and a relentless focus on customer impact.”
Following virtual coding and regional judging in September, 23 projects were selected to advance to London. These span Rocket Software’s portfolio, including several focused on Vertica® and others incorporating capabilities such as Rocket® EVA™ and Rocket® ContentEdge™, addressing challenges across mainframe operations, security, analytics, software development, customer support, and operational efficiency. Many projects apply AI to areas such as vulnerability detection, root-cause analysis, and transforming complex data into actionable insights.
The finalist projects explore experimental concepts and do not represent announcements of commercially available functionality.
The 23 teams will come together in London in November to present their projects at the Rocket.Build 2026 Finals, where this year’s winning projects will be selected and recognized for their potential to drive innovation, customer value and business impact. Learn more about Rocket.Build 2026 and follow the competition here.
Source: Rocket Software
Broadcom Fixes 89 New Open Source Vulnerabilities in TrueSource Spring Enterprise, Reaching 408 Total in 2026
Broadcom has shipped fixes for 89 novel vulnerabilities in TrueSource Spring Enterprise to its critical infrastructure customers and others who qualify for early access, ahead of public disclosure. This brings the total number of vulnerabilities fixed across TrueSource offerings to 408.
Patches only secure an environment once deployed. To close that gap, Spring Enterprise adds TrueSource Hub to help enterprises assess application exposure, prioritize critical fixes, and track status. Additionally, build plugins for Application Advisor automate patching within existing Maven or Gradle workflows, generating update pull requests to streamline merging approved fixes.
A sustained investment in open source security
Building on its June 2026 open source commitment, Broadcom uses Frontier AI scanning and advanced research to find and fix vulnerabilities. TrueSource Spring Enterprise delivers simultaneous fixes across all supported versions, giving legacy releases immediate access, while providing security-only patches for current versions to speed deployment. Detailed vulnerability information will be published when fixes reach the community and CVEs are issued.
Scale & Impact: Reaching a massive footprint of downloads of Spring and Reactor libraries in 2026, Broadcom engineers fixed 406 new vulnerabilities, delivered over 1,090 fixes (including 798 backports), reviewed 2,600+ reports, and filtered out 3,000+ false alarms.
Key High/Critical Broadcom Fixes Earlier This Year:
- Spring (June): Fixed a remote code execution vulnerability (CVE-2026-41855, CVSS 8.1) across four supported lines simultaneously.
- Netty Dependency (June): Discovered a DNS redirection vulnerability (CVE-2026-47691, CVSS 10.0) and addressed with the community maintainers and fixed for all supported Spring versions.
- RabbitMQ (July): Fixed a credential forgery vulnerability (CVE-2026-67404, CVSS 9.2) across four supported lines at once.
“Security isn’t a one-time initiative; it’s an ongoing commitment. In June, we pledged to identify and resolve Spring vulnerabilities faster than ever, and today’s release demonstrates our continued momentum,” said Purnima Padmanabhan, general manager, Tanzu Division, Broadcom. “Our customers receive critical fixes early in a deployable format, with complete visibility into where patches belong and confirmation when they land. Crucially, fixes are contributed back to the open source community—because open source remains resilient only when businesses actively invest in ecosystem health.”
See it, prioritize it, fix it, prove it
Most enterprises know they run open source. Few can say exactly which applications run which versions, which are out of support, and which need a fix published this morning. TrueSource Spring Enterprise closes that gap with four capabilities that work together:
- Assess every repository. TrueSource Hub connects to an organization’s code repositories and shows the security state of the open source components every application depends on, across Java, Python, and JavaScript libraries, container images, and data services, along with its patch status, in a live view rather than a one-time audit.
- Prioritize the fixes that matter. When Broadcom publishes a fix, Hub shows which applications need it and how exposed they are, so security and engineering leaders can direct effort to the applications that carry the most risk. TrueSource works with the vulnerability scanners that teams already use. Snyk, for example, is actively partnering with Broadcom so that customers can recognize Broadcom-patched Spring versions as fixed, with the goal of reducing unnecessary alerts and keeping teams from chasing alerts for already-resolved vulnerabilities.
- Apply patches in the build. For Spring applications, Spring Application Advisor plugins integrate directly into existing Maven and Gradle builds. Fixes and version upgrades arrive as reviewable pull requests built on deterministic recipes verified by TrueSource engineers. Additionally, the new integration with JFrog Zero-Touch Remediation delivers instant protection. By automatically delivering verified, backward-compatible TrueSource fixes to builds, security teams can stop waiting on manual pull requests and dependency overrides – keeping software secure with zero friction.
- Prove it through pipeline audits. Every build records its source and the libraries it contains and reports that to TrueSource, so security leaders can show their boards and leadership exactly which libraries shipped and where each fix was applied.
Source: Broadcom
0 Comments