Cisco’s Agentic AI Bet: Observability, Security, and USFP

The News

Cisco’s October 2026 analyst relations newsletter covers a broad sweep of announcements spanning collaboration, security, networking infrastructure, and observability. The headline items include new agentic collaboration features unveiled at WebexOne 2026, the Cisco-NVIDIA joint announcement of the Ultra-Dense Small Form Factor Pluggable (USFP) optical module at the OCP Global Summit, and the release of Splunk’s State of Observability 2026 report, which found that 83% of ITOps and engineering professionals are concerned about the unintended consequences of AI agents. Cisco also introduced Project Quarry, an open-source detection framework targeting rogue agentic behavior in autonomous AI workflows, and issued a critical security advisory from Talos on two unauthenticated remote code execution vulnerabilities in PHP core carrying a CVSS score of 9.2.

Analyst Take

The Observability Imperative Is Real, and the Numbers Support It

The Splunk State of Observability 2026 figure that 83% of ITOps professionals are concerned about AI agent unpredictability is not a marketing artifact. It reflects a genuine architectural shift: when agents chain tool calls, traverse system boundaries, and execute multi-step workflows autonomously, the instrumentation approaches built for microservices and human-triggered transactions stop being sufficient. Cisco is positioning Splunk’s observability stack, combined with OpenTelemetry signal expansion, as the answer. This is a credible play, given Splunk’s installed base in enterprise security and operations. The harder question is whether Cisco can close the loop from observability data to automated remediation at agent speed, not just human review speed.

This concern maps directly to what government and regulated-sector IT buyers are experiencing. According to ECI Research’s Google GovTech Survey, 48.0% of respondents identified “Navigating compliance documentation and audit evidence collection” as the greatest source of cognitive load for developers today. Agentic systems that act autonomously across environments without producing legible audit trails will make that problem significantly worse before any vendor makes it better. Cisco’s pitch that observability is “how leading teams maintain and connect AI to business value” is directionally correct. Execution, though, will require more than dashboard improvements.

Project Quarry and the Security Bet on Agentic Behavior

Project Quarry is the most technically interesting announcement in the October bundle. An open-source detection framework that evaluates entire sequences of tool calls and conversations, rather than individual events, represents a meaningful architectural departure from signature-based detection. Rogue agent detection requires reasoning about intent across a chain of actions. Most existing security tooling wasn’t built for that. By releasing Quarry as open source and positioning it as deployable standalone or within Cisco AI Defense, Cisco is attempting to seed an ecosystem around a detection primitive it controls. That’s a smart competitive move.

The timing is not accidental. The Talos advisory on two PHP core RCEs with a CVSS score of 9.2, combined with the observation that AI is accelerating vulnerability discovery and shrinking patch windows, reinforces Cisco’s core security narrative: the attack surface is expanding faster than organizations can manually defend it. ECI Research’s Google GovTech Survey found that 31.8% of respondents identified “FedRAMP/compliance approval friction for AI vendors” as the single largest blocker preventing widespread AI adoption in developer workflows. That friction exists precisely because security and compliance teams don’t yet have reliable frameworks for evaluating AI agent behavior. Project Quarry, if it gains traction, could become part of the evidence base that helps agencies make those approvals.

USFP and the Infrastructure Bet

The Cisco-NVIDIA USFP announcement at OCP is easy to overlook in a newsletter this dense, but it matters strategically. At 400Gb/s per lane, USFP is targeting the bandwidth demands of AI factory architectures without requiring additional network tiers or full infrastructure overhauls. For ITDMs building or expanding GPU clusters, the promise of maintaining pluggable optics serviceability while scaling density is a meaningful TCO argument. For developers and platform engineers, it’s largely invisible infrastructure, but it directly affects the latency and throughput characteristics of the distributed training and inference environments they depend on.

Cisco’s positioning here is that it can serve both the open standards community (via OCP) and the hyperscale AI infrastructure market simultaneously. Whether that holds as NVIDIA deepens its own networking stack with Spectrum-X and InfiniBand remains a legitimate competitive question. The USFP collaboration is a positive signal, but co-announcement with NVIDIA doesn’t guarantee co-market alignment over time.

Looking Ahead

Cisco’s October slate is best read as a coherent, if still early, response to the agentic inflection point. The company has the portfolio breadth to compete across observability, security, collaboration, and infrastructure simultaneously. What it hasn’t yet demonstrated is the integration depth that would make those layers feel like a unified platform rather than a coordinated product family. That distinction will matter more as enterprise buyers consolidate vendors and demand that observability data, security telemetry, and network intelligence flow into each other without custom integration work.

Watch the Webex Dialog platform closely over the next two quarters. Agentic customer engagement is a high-stakes category, and Cisco is entering it against established players with deeper CRM integrations. If Dialog can demonstrate measurable outcomes in continuous customer relationship management, it becomes the collaboration story. If it stalls at the pilot stage, the WebexOne announcements will be remembered primarily as a rebranding exercise. The Splunk observability and Project Quarry threads, by contrast, are likely to show durable traction, because the problems they address, agent unpredictability and novel attack surface, are only getting more acute.

Authors

  • Paul Nashawaty

    Paul Nashawaty, Practice Leader and Lead Principal Analyst, specializes in application modernization across build, release and operations. With a wealth of expertise in digital transformation initiatives spanning front-end and back-end systems, he also possesses comprehensive knowledge of the underlying infrastructure ecosystem crucial for supporting modernization endeavors. With over 25 years of experience, Paul has a proven track record in implementing effective go-to-market strategies, including the identification of new market channels, the growth and cultivation of partner ecosystems, and the successful execution of strategic plans resulting in positive business outcomes for his clients.

    View all posts
  • Samantha Weston

    With over 15 years of hands-on experience in operations roles across legal, financial, and technology sectors, Sam Weston brings deep expertise in the systems that power modern enterprises such as ERP, CRM, HCM, CX, and beyond. Her career has spanned the full spectrum of enterprise applications, from optimizing business processes and managing platforms to leading digital transformation initiatives.

    Sam has transitioned her expertise into the analyst arena, focusing on enterprise applications and the evolving role they play in business productivity and transformation. She provides independent insights that bridge technology capabilities with business outcomes, helping organizations and vendors alike navigate a changing enterprise software landscape.

    View all posts