Zero-day exploits used to take attackers weeks or months to develop. Frontier AI models have collapsed that timeline down to hours, and that shift sits at the center of an expanded partnership between Kyndryl and Broadcom aimed at helping enterprises build private clouds that can keep pace.
The expanded alliance centers on VMware Cloud Foundation, with Kyndryl providing end-to-end consulting across strategy, architecture, modernization, and ongoing operations. Both companies are investing in training several thousand certified Kyndryl consultants and architects, specifically to support agentic workflows, the kind of AI-driven automation increasingly running inside enterprise infrastructure.
Giovanni Carraro, Kyndryl’s Global Strategic Alliances Leader, tied the expansion to rising sovereignty requirements pushing enterprises to rationalize their hybrid and private cloud environments. He said the partnership will help customers build resilient private clouds that support AI adoption while addressing vulnerabilities AI itself is starting to surface.
The threat model driving this is unusual. Autonomous agents can now discover and exploit weaknesses across application code, containers, virtual machines, and deployment pipelines at machine speed, without relying on the known attack signatures traditional security tools look for. That changes what defense requires: instead of patching vulnerabilities after the fact, Kyndryl’s approach builds policy guardrails and secure deployment paths in before a workload ever goes live.
Regan McGrath, Broadcom’s President for the Americas, framed the expanded relationship as giving mutual customers the expert guidance needed to treat VMware Cloud Foundation as a genuine strategic platform rather than just infrastructure. Kyndryl is also applying its own Agentic AI Framework to keep AI agents operating within approved, deterministic boundaries shaped by each customer’s specific business rules and regulatory requirements, so automation stays predictable even as the underlying models and data change.
The partnership also folds in cyber recovery capabilities built on VMware’s isolated recovery environments, immutable snapshots, and automated runbooks, designed to restore operations quickly with verified data integrity after an incident.
Kyndryl holds Pinnacle Partner status in Broadcom’s Advantage Partner Program and manages one of the largest VMware asset portfolios in the industry, a position built on years of hands-on VMware and mainframe modernization work across regulated sectors like financial services, healthcare, and government.
