Wallix and Inria have launched a strategic partnership to develop sovereign, trusted AI specifically for identity and access management (IAM) cybersecurity. Announced at VivaTech, the agreement combines public research with industrial expertise to create robust, explainable AI models capable of securing human and non-human digital identities against sophisticated cyber threats.
Why is digital sovereignty a priority for cybersecurity?
The partnership addresses a growing European dependency on non-European technology. According to Wallix CEO Jean-Noël de Galzain, digital freedom relies on two inseparable pillars: security and independence. He stated that developing technologies that combine performance, transparency, and sovereignty is now essential.
As organizations face increasing pressure to maintain resilience and compliance, the reliance on external AI models creates potential vulnerabilities. By building “sovereign AI,” the Wallix-Inria collaboration aims to provide high-performance security tools that remain under European control, reducing the risks associated with foreign-owned infrastructure.
Inria CEO Bruno Sportisse noted that this collaboration is designed to strengthen the public and private digital ecosystem. He framed the initiative as a concrete contribution to France’s digital sovereignty through integrated research and innovation.
What technologies will the Wallix-Inria partnership focus on?
The collaboration moves beyond traditional security models to address the complexities of modern digital environments. The two partners will work on several specific technological frontiers, according to the official announcement:
- Behavioral Analysis: Monitoring the activities of both human users and non-human identities to detect anomalies.
- Intelligent Access Governance: Using AI to manage how and when users access sensitive data.
- Automated Privilege Reduction: Reducing “excessive privileges” by automatically limiting access rights to only what is necessary.
- Machine Identity Security: Protecting technical accounts, APIs, services, and automated workloads.
- Continuous Compliance: Generating real-time audit evidence to meet regulatory requirements.
The research will prioritize models that are “robust, explainable, and frugal.” These characteristics are critical for deployment in sensitive or resource-constrained environments where AI must be both reliable and efficient.
Non-human identities—such as APIs, bots, and service accounts—now often outnumber human users in enterprise networks. These “machine identities” are frequent targets for attackers because they often lack the same level of monitoring applied to human employees.
How does this partnership relate to the Malizen acquisition?
This strategic agreement is not an isolated event but an evolution of existing ties between the two organizations. Wallix previously integrated Malizen, a startup originating from Inria’s Rennes University Center, into its operations.
By moving from a single startup acquisition to a broad strategic partnership, Wallix and Inria are deepening the link between academic research and industrial application. This shift allows for faster translation of laboratory breakthroughs into market-ready cybersecurity solutions.
Pro Tip for Security Leaders
When implementing AI-driven identity management, prioritize “explainable AI.” If a system automatically revokes access, your security team must be able to understand the specific logic behind that decision to avoid paralyzing critical business processes.
Frequently Asked Questions
What is “Sovereign AI”?
Sovereign AI refers to artificial intelligence technologies developed, controlled, and hosted within a specific jurisdiction (such as the EU) to ensure data privacy, security, and independence from foreign technological influence.
What is Identity and Access Management (IAM)?
IAM is a framework of policies and technologies that ensures the right individuals and machines have the appropriate access to technology resources, helping to prevent unauthorized entry into sensitive systems.
Why is behavioral analysis important in cybersecurity?
Behavioral analysis looks for deviations from normal patterns. If a user suddenly accesses files they have never touched before or logs in from an unusual location, AI can flag this as a potential credential theft or insider threat.
What do you think is the biggest challenge in securing machine identities? Share your thoughts in the comments below or subscribe to our newsletter for more deep dives into cybersecurity trends.
