WALLIX and Inria Announce Strategic Partnership to Develop Trusted, Sovereign AI for Identity and Access Management

WALLIX and Inria Partner to Develop Sovereign AI for Cybersecurity in France

INFORMATIONAL
June 18, 2026
4m read
Policy and ComplianceSecurity Operations

Related Entities

Organizations

Products & Tech

Malizen

Other

VivaTechFranceJean-Noël de GalzainBruno Sportisse

Full Report

Executive Summary

At the VivaTech 2026 conference in Paris, French cybersecurity specialist WALLIX and Inria, the French National Institute for Research in Digital Science and Technology, announced a strategic partnership. The collaboration is aimed at creating a new generation of sovereign and trusted Artificial Intelligence (AI) solutions for the cybersecurity market. The primary focus will be on enhancing identity and access management (IAM) capabilities through AI, addressing challenges like behavioral anomaly detection and the security of non-human (machine) identities. This partnership represents a significant step towards strengthening France's and Europe's digital sovereignty by developing homegrown, advanced cybersecurity technologies.


Regulatory Details

This partnership is not a regulation but a strategic initiative that aligns with broader European policy goals, such as those outlined in the EU's Cybersecurity Strategy and the push for digital sovereignty. The collaboration was facilitated by the French government's Étincelles program, which is designed to foster innovation by connecting small and medium-sized enterprises (SMEs) with public research institutions. The partnership aims to produce technologies that are 'trusted by design,' a principle that aligns with emerging AI regulations and certification schemes in Europe.

Affected Organizations

  • Primary Partners:
    • WALLIX: A European provider of Privileged Access Management (PAM) and IAM solutions.
    • Inria: France's leading public research institute in digital sciences.
  • Beneficiaries: The partnership aims to benefit European organizations, particularly in regulated and critical sectors, by providing them with sovereign, AI-driven cybersecurity solutions that are not dependent on non-EU technology providers.

Compliance Requirements

The technologies developed through this partnership will be designed to help organizations meet increasingly complex compliance requirements. The key research areas directly map to modern security and compliance challenges:

  • Identity Behavioral Analytics: Helps meet requirements for continuous monitoring and anomaly detection, as mandated by frameworks like the NIS2 Directive.
  • Intelligent Access Governance: Aims to automate the enforcement of the Principle of Least Privilege, a core tenet of GDPR, ISO 27001, and other standards.
  • Securing Non-Human Identities: Addresses a growing compliance gap in managing the identities and access of APIs, service accounts, and IoT devices.
  • Continuous Compliance Systems: The goal is to create AI-powered systems that can continuously assess and report on an organization's compliance posture.

Implementation Timeline

  • June 18, 2026: The partnership was officially announced at VivaTech 2026.
  • The collaboration will be structured around ongoing joint research projects and technology demonstrators, with no fixed end date.
  • The partnership builds on a previous successful collaboration that led to the creation of Malizen, a technology developed from Inria research that was integrated into WALLIX's product line.

Impact Assessment

  • Strategic Impact: This partnership strengthens the European cybersecurity ecosystem by fostering collaboration between industry and academia. It is a direct effort to compete with larger, non-European technology providers in the advanced AI and cybersecurity space.
  • Technological Impact: The collaboration is expected to produce innovative solutions that can more effectively detect sophisticated threats, such as insider threats or compromised accounts, by using AI to analyze behavioral patterns. It will also advance the state of the art in managing the explosion of machine identities in modern IT environments.
  • For WALLIX: The partnership provides access to world-class research talent and cutting-edge AI models, accelerating its product development roadmap and enhancing its competitive position.
  • For Inria: It provides a clear path for transferring scientific research into real-world commercial products that address critical market needs, fulfilling its mission of technological innovation.

Enforcement & Penalties

Not applicable.

Compliance Guidance

While the products from this partnership are still in development, the announcement signals a clear direction for the future of IAM. Organizations should begin preparing their security strategies for the adoption of AI-driven tools by:

  1. Improving Data Quality: AI-powered behavioral analytics relies on high-quality log data. Ensure you are comprehensively logging all authentication and access events across your environment.
  2. Baselining Current Activity: Begin to establish a baseline of normal user and entity behavior. Understand who accesses what, from where, and at what times.
  3. Inventorying Non-Human Identities: Start creating an inventory of all service accounts, API keys, and machine identities. This is a prerequisite for securing them with next-generation tools.

Timeline of Events

1
June 18, 2026
WALLIX and Inria announce their strategic partnership at the VivaTech 2026 conference.
2
June 18, 2026
This article was published

Timeline of Events

1
June 18, 2026

WALLIX and Inria announce their strategic partnership at the VivaTech 2026 conference.

Article Author

Jason Gomes

Jason Gomes

• Cybersecurity Practitioner

Cybersecurity professional with over 10 years of specialized experience in security operations, threat intelligence, incident response, and security automation. Expertise spans SOAR/XSOAR orchestration, threat intelligence platforms, SIEM/UEBA analytics, and building cyber fusion centers. Background includes technical enablement, solution architecture for enterprise and government clients, and implementing security automation workflows across IR, TIP, and SOC use cases.

Threat Intelligence & AnalysisSecurity Orchestration (SOAR/XSOAR)Incident Response & Digital ForensicsSecurity Operations Center (SOC)SIEM & Security AnalyticsCyber Fusion & Threat SharingSecurity Automation & IntegrationManaged Detection & Response (MDR)

Tags

AIArtificial IntelligenceCybersecurityWALLIXInriaFranceIAMSovereignty

📢 Share This Article

Help others stay informed about cybersecurity threats

🎯 MITRE ATT&CK Mapped

Every tactic, technique, and sub-technique used in this threat has been identified and mapped to the MITRE ATT&CK framework for consistent, actionable threat language.

🧠 Enriched & Analyzed

Observables and indicators of compromise (IOCs) have been extracted and cataloged. Risk has been assessed and correlated with known threat actors and historical campaigns.

🛡️ Actionable Guidance

Detection rules, incident response steps, and D3FEND-aligned mitigation strategies are included so your team can act on this intelligence immediately.

🔗 STIX Visualizer

Structured threat data is packaged as a STIX 2.1 bundle and can be visualized as an interactive graph — relationships between actors, malware, techniques, and indicators.

Sigma Generator

Sigma detection rules are derived from the threat techniques in this article and can be converted for deployment across any major SIEM or EDR platform.