Illumio joins WWT's AI resilience framework for containment

Illumio will be featured in World Wide Technology's AI Readiness Model for Operational Resilience, a framework designed to assess and manage AI risk.

The inclusion places Illumio within a vendor-neutral model developed by World Wide Technology, or WWT, to help organisations assess security issues linked to AI environments. Its role centres on breach containment, limiting how far an attack can spread after an initial compromise.

AI systems are creating more links between applications, infrastructure, devices and external services, increasing the number of paths attackers can use to move across an organisation's estate. Illumio says its products help security teams identify those paths and apply controls to reduce lateral movement across systems that support AI workloads.

Under the ARMOR framework, Illumio says it helps organisations map communications across workloads, devices and internet connections to identify high-risk exposure around AI systems. Customers can also apply segmentation policies across data centres, cloud environments, containers, endpoints and operational technology.

The framework also covers the use of public AI services. That includes identifying connections to public large language model services, AI agent processes and the systems they contact, while measuring whether observed traffic matches policy requirements and control standards.

Illumio says its segmentation measures can extend to performance-sensitive AI infrastructure through NVIDIA BlueField-3 DPUs, allowing controls to be enforced beyond the host itself.

Todd Palmer, Senior Vice President of Global Partner Sales and Alliances at Illumio, said the company's inclusion in ARMOR reflects a shift in how companies must think about cyber defence in AI deployments.

"AI isn't just adding more technology to the enterprise; it's creating systems that are more connected and increasingly autonomous. That makes controlling how far and how fast an attack can move more important than ever. ARMOR gives organisations a framework for thinking about that risk, and Illumio brings the containment needed to limit its impact," Palmer said.

Framework design

WWT said ARMOR was developed with NVIDIA and through work with the Texas A&M University System. The model organises AI security into seven domains: Governance, Risk and Compliance; Model Protection; Secure AI Operations; Infrastructure Security; Identity Security; Data Security; and the Secure Software Development Lifecycle.

Within that structure, Illumio is positioned in the infrastructure and operational resilience layers, where the focus is on containing a breach rather than assuming preventative measures will stop every attack. The approach reflects a wider industry shift towards resilience planning as organisations connect AI tools to core business systems.

Chris Konrad, Vice President of Global Cyber at World Wide Technology, outlined WWT's view of the need for broader controls around AI systems.

"Securing AI requires more than protecting a model in isolation. Organisations need control across the infrastructure, identities, applications, and data that allow AI to operate. With its differentiated ability to see and contain lateral movement across complex environments, Illumio contributes to ARMOR's broader approach to helping organisations build secure, resilient AI environments," Konrad said.

Containment focus

The announcement highlights a growing concern among corporate security teams that AI deployments can expand attack surfaces by linking models, data stores, cloud platforms, endpoints and third-party services. In that context, vendors are increasingly framing cyber resilience around what happens after an attacker gains initial access, including whether internal communications can be restricted quickly enough to prevent wider disruption.

Illumio said its platform combines visibility and segmentation through its Illumio Insights and Illumio Segmentation products. This enables security teams to understand risk in connected environments and isolate exposed systems or suspicious pathways.

For WWT, the addition broadens the set of suppliers represented in ARMOR as customers look for ways to evaluate AI security across multiple layers rather than through a single product category. The framework's vendor-agnostic positioning suggests it is intended to serve as a reference model for organisations still determining how to structure AI governance and operational safeguards.

ARMOR groups those safeguards across governance, model, infrastructure, identity, data and software development controls, while Illumio's contribution is centred on limiting lateral movement across the systems that support AI operations.