IBM opens self-hosted IBM Bob for on-prem and air-gapped AI coding

IBM said Thursday it introduced self-hosted deployment for IBM Bob, so organizations can bring AI software development and modernization to on-premises, private-cloud, sovereign-cloud, and air-gapped environments without moving sensitive code outside their control.

Most AI coding tools want the repository in their cloud. A regulated team often cannot send its source code there. Self-hosted Bob is IBM’s answer: agentic help, meaning software that can plan and carry a change rather than only suggest a line, on code that stays inside infrastructure the organization controls.

On Thursday, 1 October 2026, IBM announced self-hosted deployment for IBM Bob. The dateline is Armonk, New York. The IBM Newsroom page dates the item October 1, 2026, and it identifies the company as IBM, listed on the New York Stock Exchange under IBM. The line under the headline says enterprises can now use AI-powered software development and modernization without moving sensitive code, data, or workflows outside infrastructure they control. Bob, IBM says, is its agentic software development platform. Agentic, here, means the software can take a next step in the work — understand a system, plan a change, carry it out — rather than only suggesting the next line of code. IBM says Bob is meant to move past code generation and apply that help to software delivery and modernization. Those lines are the newsroom’s.

Who the option is for, as the newsroom states it. Organizations that hold sensitive source code, regulated data, or mission-critical infrastructure often have security and compliance rules that limit a public AI platform. For many of them, especially in regulated industries, using AI means controlling where the system runs, what data it can reach, and how it is governed. The newsroom names four places a customer can run this deployment, where the customer has that control. On-premises means the company’s own machines, in buildings it runs. A private cloud is a cloud reserved for one organization. A sovereign cloud is a cloud run so the data stays under a jurisdiction, or a set of rules, the organization accepts. Air-gapped means the network is cut off from the public internet. Those four names, and that control line, are IBM’s.

Two market figures sit on the same page, and each belongs to the report IBM cites. The newsroom points to a 2026 Futurum Research report, Sovereign AI: What Nations Want (And What They’ll Actually Get). It says hybrid and edge deployments are projected to capture 44 percent of the AI infrastructure market by 2030, as organizations seek sovereign control and still want connections to a wider ecosystem, while the public cloud’s share is projected to decline to 46 percent in that same window. Forty-four percent is a bit under half. Forty-six percent is a bit under half as well. Both numbers are projections for 2030. Hybrid, here, means a mix of a customer’s own machines and an outside service. Edge means computing that sits close to the work, rather than only in a distant public data center. The page does not print the public cloud’s share today, so the direction of that decline is Futurum’s, not a drop computed from a starting figure on the page. The same paragraph is not a count of IBM Bob customers. Those projections are Futurum’s, as IBM cites them.

The second figure is from IBM’s own research group. The newsroom cites The Calculus of AI Sovereignty, a report IBM’s Institute for Business Value published in June 2026. It says 68 percent of surveyed executives say meeting data-residency and sovereignty requirements across geographies is challenging. Sixty-eight percent is about two in three of the people in that survey. Surveyed executives means the people the institute asked. It is not a census of every company. Data residency is the rule about which country, or which building, the data sits in. Sovereignty, in that sentence, is the requirement that the organization, or its government, stays in charge of that data. Those lines are the institute’s, as the newsroom cites them. The newsroom does not print the survey’s sample size.

What the self-hosted option is supposed to change, in the newsroom’s account. IBM says it brings AI onto customer-managed infrastructure for organizations that want more control over data residency, security policy, AI governance, and the way software gets built. AI governance, here, is the set of rules for which model runs, what it may see, and who can check the result later. A model is the AI system that reads the code and writes a result. Unlike many AI coding tools that require an organization to move data to an outside service, IBM says the self-hosted version lets a company run development and modernization where the code, the application context, and the data already sit. Application context is the surrounding information the tool needs — the project, the dependencies, the way the system is put together — not only one open file. IBM also says many AI development tools were built mainly for cloud-native environments, meaning software shaped to run in a public cloud, while enterprise modernization often still involves applications and data spread across on-premises systems, private clouds, and other controlled environments. Those lines are the newsroom’s.

Neel Sundaresan, general manager of AI and Automation at IBM, is quoted on the newsroom page. “The future of enterprise AI will depend on security, governance and sovereignty,” he said. “Organizations need AI that operates inside environments they have control over, especially when working with sensitive code and regulated data. Bob’s self-hosted deployment provides a way for enterprises to bring agentic AI directly to those environments so they can benefit from the technology while maintaining security, compliance, and operational control.” That quotation is his, in the newsroom release. The page does not attach a price, or a count of customers, to the quotation.

How the models are supposed to run, in the newsroom’s words. IBM says most enterprises operate software that holds intellectual property, proprietary source code, and regulated customer information. The self-hosted option is IBM’s account of bringing the AI to that data, instead of moving the data to the AI. Enterprises can run supported models on premises, including in an air-gapped environment, using supported models they have licensed, or they can connect Bob to supported external model services in a hybrid setup. Supported, in those sentences, is IBM’s word for the models it says will work with Bob. A licensed model is one the customer already has a right to run. A hybrid setup, here, means Bob can stay in the customer’s environment and call an outside model service IBM says it supports. The newsroom does not print a product-name list of those models, and it does not print a price for either path.

A second IBM page carries the product announcement, and it prints a different clock. The page is titled IBM Bob expands to self-hosted environments for sensitive and mission-critical enterprise software. It stamps Published 30 September 2026. The line under the title says the point is to bring agentic software development to sensitive and mission-critical workloads while the enterprise keeps control of deployment, models, and infrastructure. The opening sentence says that today IBM announces the general availability of the self-hosted deployment option. General availability means the ordinary release, the one a customer can take without a special preview. That sentence is about the self-hosted option. The page does not say every way of running Bob became available that day. The newsroom dates its announcement October 1, 2026, and it does not use the words general availability. The announcement’s published stamp is 30 September. The newsroom’s dateline is 1 October. Both clocks are IBM’s. The page names Parul Mishra, vice president of product management for watsonx Orchestrate, and Neel Sundaresan. The newsroom is the page that gives Sundaresan the general-manager title beside the quotation.

What the announcement says a customer can do with that self-hosted release. Run IBM Bob in a customer-managed enterprise environment. Use the core Bob experience across the deployment setups IBM supports, so a developer sees the same product while platform and security teams pick the model and the infrastructure for each workload. The capabilities the page lists are the IDE experience, BobShell, parallel tool calling, an agent harness, skills, and modes. An IDE is the editor a developer already works in. BobShell is named here. The product site is the page that describes it as Bob on the command line. Parallel tool calling means the agent can use more than one tool at the same time. An agent harness is the software frame that runs the agent. A skill is a packaged ability. A mode is a chosen way of working. The page says those pieces help a team understand, plan, develop, and modernize applications. It also says a customer can choose among supported self-hosted, air-gapped, and hybrid model configurations, use an eligible model license the customer already holds, and connect Bob to supported editors and infrastructure so it fits the workflow the team already has. Bring-your-own-license, the page’s phrase, means the customer uses a model license it already pays for, rather than buying that model again from IBM. Those lines are the announcement’s. It does not print a price.

Optional add-ons, as the announcement names them. A customer can extend Bob with the IBM Bob Premium Package for Java Modernization, the IBM Bob Premium Package for i, and the IBM Bob Premium Package for Z. Each one depends on the license and the deployment rules that apply. IBM i is IBM’s midrange operating system, still common in back-office systems. IBM Z is IBM’s mainframe platform. The Java package, the page says, adds modernization workflows built for that job. The i package adds connectivity, workflows, tools, and IBM i knowledge for that platform. The Z package adds large-scale application understanding and modernization, including IBM Z context and application analysis. The page calls the packages optional extensions of the core experience. It does not say a self-hosted install includes them automatically. It says they are a path for applying this kind of development both to new applications and to the older software the enterprise already depends on. Those lines are IBM’s.

Where the model runs, on the announcement, still in the newsroom’s wording of supported models. At the self-hosted release, IBM says the customer sources a supported model and provides access to it. One group is models the customer installs and manages on its own infrastructure. The other is models the customer reaches through an approved private connection to an outside service. A private connection, here, means an approved path to that outside service. The page says that choice decides where inference happens and how code and development context are processed. Inference is the run itself, the model reading the work and writing a result, as distinct from the earlier training of the model. With a supported self-hosted model, IBM says code, development context, and build artifacts can stay inside the customer-managed environment. A build artifact is the output of a build, such as a compiled program. The page’s example is a financial institution: on-premises inference for work on core banking applications, and an approved external model service for a less restricted workload, with developers on the same core Bob experience either way. IBM says the flexibility matters for financial services, government, healthcare, critical infrastructure, and companies protecting intellectual property, proprietary business logic, and mission-critical software. The page says IBM plans to widen the supported set and to add multi-model routing in a later release. Multi-model routing would mean the system picks which model handles a task. The page marks that as later work. It does not say the routing is available with Thursday’s news. The pages do not print a price.

What the product site says Bob is, separate from the deployment announcement. The site at bob.ibm.com calls Bob an AI-powered development partner. The line under that headline says Bob works in the codebase beside the developer. The page describes agents and subagents that can run pieces of work in parallel and in the background, each with its own context, tools, and skills. A subagent is a narrower agent spawned for one part of the job. It describes Literate Coding: the developer explains the change in ordinary language, and Bob writes the implementation in the project, without a separate chat window off to the side. It describes Bob Shell for interactive command-line work, for repetitive scripts, and for a continuous-integration pipeline. Continuous integration is the automated build and check that runs when code is submitted. It describes Bobalytics as the view of what Bob contributed across delivery, including adoption, a business result, and cost. It says premium packages cover Java upgrades, mainframe work, and IBM i development. It says Bob can reach Red Hat and Instana from the editor. Instana is IBM’s product for watching a running application. Red Hat is the company behind OpenShift, the system the newsroom’s about box names. Those product-site lines are not repeated as features of the October 1 newsroom release. The site does not print a price, and it does not say self-hosted deployment is the only way to run Bob.

Who IBM says it is, in the about box on the newsroom release. IBM calls itself a provider of hybrid cloud, AI, and consulting. It says it helps clients in more than 175 countries use their data, simplify processes, and cut costs. More than 175 is the company’s count of countries. It says thousands of governments and companies in financial services, telecommunications, and healthcare rely on IBM’s hybrid cloud platform and Red Hat OpenShift. A container, the unit OpenShift runs, is a packaged copy of an application and what it needs to start. The box also names quantum computing and industry-specific cloud work. The media contact on the page is Rebecca Neufeld at IBM. The release does not print a price for self-hosted Bob, and it does not print a count of customers on that deployment.

The picture is IBM’s Bob product screen. A dark application window carries the IBM Bob name in the side rail. A small robot in a hard hat, with a code mark on its chest, sits above the greeting “Hi, I’m Bob.” The lines under it call Bob an AI development partner that can augment a workflow and help a person understand, plan, and improve a real codebase, and they close with “Let’s build something amazing together.” A Recent tasks list shows two sample jobs: “Create a playable 2048 game,” marked 3 hours ago, and “Create a time zone converter app,” marked 6 days ago. A switch reads “Auto-approve disabled.” The input line reads “Type your task here…,” with a Plan control at the corner. Beside the chat, a code editor is open on a file tab, with JavaScript build tasks in the pane. The sample jobs, the times, and the file are labels on the product screen. The newsroom does not say they are a named customer’s project. The screen does not print a calendar date.

In plain terms, IBM said on Thursday that organizations can run Bob, its agentic software-development platform, on infrastructure they control: on-premises, a private cloud, a sovereign cloud, or an air-gapped network. The newsroom’s point is that code, context, and data can stay there, with supported models running on site, including behind an air gap, or with Bob connected to a supported outside model service. Sundaresan is quoted on security, governance, and sovereignty. A product page stamped 30 September calls the self-hosted option generally available and lists the editor, BobShell, and optional packages for Java, IBM i, and IBM Z. That general-availability line is about self-hosted deployment. The pages do not print a price, a customer count, or a newsroom list of model product names.