T-Bank staged a "cyberattack" on itself using AI: over 1300 services were checked

T-Bank tested its own digital infrastructure in a new way – using artificial intelligence, which independently searched for weaknesses and simulated attacks. For this, the bank developed the Nulla system: it consists of attacking AI agents capable of automatically finding vulnerabilities without human intervention. The company claims that this is the first such experience in Russia.

During testing, more than 1300 services and platforms were checked. These include "T-Business", "T-Travel" and "T-Auto". If a classic manual audit of one service usually took 2-3 days, with Nulla, the average time was reduced to 45 minutes, the company said.

Nulla differs from conventional tools in that it does not just launch a standard check, but adapts the attack strategy to the specific protection features of a particular system. AI builds complex chains for finding vulnerabilities and analyzes dozens of services simultaneously without compromising the quality of the check.

T-Bank noted that the system is already being used to protect the ecosystem. Development began in April 2025. The economic effect of preventing possible incidents is estimated at 100 million rubles.