Xinghe AI Network Security Agentic SOC: is China preparing the industrialization of autonomous cybersecurity?

Through this initiative, a broader ambition is taking shape for China: building digital infrastructures capable of defending themselves. This is an evolution that could redefine the balance of global cybersecurity at a time when technological competition is now playing out in the field of autonomous systems.

Xinghe, Huawei’s digital Milky Way

Unveiled on April 28 in Cairo during the Huawei Network Summit, the annual technology event bringing together operators, industrial players and decision-makers from the information and communication technology sector, the Xinghe AI Network Security Agentic SOC is not an isolated launch. This solution sits at the heart of the Xinghe Intelligent Network initiative, the cornerstone of Huawei’s Net5.5G strategy, which aims to build infrastructures where connectivity, computing power, artificial intelligence and cybersecurity converge within a single ecosystem.

The Xinghe Intelligent Network is not a network architecture like any other. Huawei is seeking to adapt network infrastructures to the era of artificial intelligence. The network is no longer simply a means of communication between users and applications, but an infrastructure capable of connecting users, data, computing power and AI. In Chinese, Xinghe (星河) literally means “river of stars” or “Milky Way.” The semantic choice illustrates the group’s ambition: to build a vast, interconnected and omnipresent digital ecosystem. Like a galaxy, each component — cloud, data center, computing capabilities, artificial intelligence — forms a node integrated into a coherent whole.

To bring this vision to life, the Xinghe Intelligent Network is presented as an integrated ecosystem covering the entire digital chain and based on four interdependent components. Xinghe AI Fabric forms the computing layer by optimizing the use of computing resources and artificial intelligence infrastructures. Xinghe Intelligent WAN ensures the intelligent transport of data and computing capabilities across the network. Huawei Xinghe Intelligent Campus connects digital infrastructures to the physical world by securing interactions with users and critical environments. Finally, Xinghe Intelligent Network Security completes the whole by relying on an AI-versus-AI logic designed to detect and neutralize increasingly sophisticated threats.

The slogan of the Xinghe Intelligent Network — “AI for All, Everything on Secure IP” — sums up Huawei’s ambition in itself. The Chinese group argues that artificial intelligence should not be the preserve of technology giants or the most advanced economies, but should become a capability accessible to all organizations. In this respect, every company, administration or critical infrastructure is expected to integrate AI agents at the heart of its daily operations in the future. This message has particular resonance in emerging markets, especially in Africa, where needs in digital infrastructure and cyber talent are considerable. Huawei offers not only network equipment, but also computing capabilities, cloud services, cybersecurity solutions and now integrated agentic architectures.

Beyond its commercial dimension, this slogan can also be interpreted through a more geopolitical lens. Faced with American dominance over the strategic layers of the digital economy, from hyperscalers to artificial intelligence models, China is seeking to promote an alternative technological ecosystem.

The ambition is no longer merely to build communication networks, but to provide the infrastructures capable of simultaneously transporting data, computing power and artificial intelligence services. In other words, to build what could be described as a cognitive infrastructure, designed to support the global AI economy and spread Chinese technological standards well beyond its borders.

From assistance to autonomy: the rise of the agentic SOC

The agentic SOC developed by Huawei, meaning a security operations center based not on humans but on artificial intelligence agents, reflects a desire to industrialize autonomous cybersecurity. Traditional security operations centers today have to process thousands of daily alerts, distinguish real threats from false positives and respond to attacks capable of spreading within minutes. By automating part of the defense cycle, agentic systems aim to drastically reduce response times and adapt defense capabilities to the increasing speed of digital threats.

This dynamic goes far beyond Huawei alone. The entire cyber ecosystem is facing the emergence of the agentic era, marked by the growing integration of artificial intelligence agents into defense processes. The subject has become sufficiently structural to feature as a theme of the INCYBER Europe Forum 2027, whose work will focus in particular on agentic vertigo and the consequences of the progressive autonomization of digital systems.

This transformation is also part of a broader context of agentic warfare, marked by the emergence of artificial intelligence agents capable of automating both offensive and defensive operations. In this logic, competition no longer takes place only between human attackers and defenders, but increasingly between autonomous systems capable of detecting, analyzing and acting at a speed beyond human reach. For Huawei, the challenge is therefore to provide organizations with a response capability suited to this environment, in which agents may tomorrow confront other agents within an almost instantaneous decision-making loop.

To meet this challenge, the SOC relies on an architecture built around three specialized agents. First, the sensing agent monitors the environment and provides 100% visibility over assets. It uses more than 3,000 analysis rules to scan billions of logs in a few seconds, eliminating blind spots in corporate networks. Next, the analysis agent, powered by HiSecLLM, Huawei’s own large security language model, can filter and analyze more than 10,000 daily alerts to identify real threats, reducing business interruptions by 95%. Finally, the enforcement agent is the armed arm of the SOC. It triggers automated responses in under two minutes, compared with around four hours for a traditional human intervention, preventing an attack from spreading before it becomes critical.

Autonomous cybersecurity as a new instrument of South-South cooperation for China

The deployment of the Xinghe Network Security Agentic SOC is part of a broader dynamic of South-South technological cooperation driven by Huawei. At the Huawei Network Summit 2026, Rock Qin, Vice President of Huawei North, West and Central Africa, reaffirmed the group’s ambition to support the digital transformation of North Africa. This strategy responds to a structural reality in many African markets: the rapid digitalization of economies, combined with a persistent deficit in digital infrastructures, cybersecurity capabilities and talent.

North Africa occupies a special place in this strategy. Located at the intersection of sub-Saharan Africa, the Middle East and Europe, the region is a genuine platform for China’s regional expansion, enabling it to reach several markets at once. This geographical position is accompanied by growing needs in digital infrastructures, data centers and computing capabilities, which are essential to the development of uses linked to artificial intelligence.

Egypt appears, in this respect, to be a particularly strategic node. Thanks to its position around the Suez Canal, at the crossroads of the main commercial and digital routes linking Asia, Africa and Europe, the country aims to become a regional center for the development of digital infrastructures and the adoption of artificial intelligence on the continent. Morocco is following a similar trajectory, seeking to strengthen its role as a regional digital hub through the development of data centers, cloud and high-value-added digital services.

By offering networks, computing capabilities, cloud solutions, cybersecurity tools and now agentic architectures at the same time, Huawei is positioning itself as a leading technological partner for States seeking to accelerate their digital transformation. Beyond cybersecurity alone, the stated objective is to support the emergence of an “intelligent industry,” based on the integration of artificial intelligence into major economic sectors. Huawei is therefore focusing its investments on several areas considered priorities: education, health, retail, public administration, manufacturing and hospitality.

From this perspective, the export of the Xinghe model goes beyond the simple commercialization of cybersecurity solutions. It contributes to the dissemination of an integrated technological ecosystem while strengthening Chinese technological influence in a region that has become central to the global digital economy.

Beijing no longer views AI as a simple decision-support tool, but as the operational foundation of digital security. The Xinghe AI SOC is concrete proof that the boundary between analysis, decision and action is tending to disappear in favor of automated mechanisms.