WALLIX

Overview

WALLIX is a French privileged access management vendor listed on Euronext (ticker ALLIX) and, in 2026, the most visible European-headquartered alternative to the US PAM leaders. Its WALLIX ONE platform combines privileged session management, credential vaulting, endpoint privilege elevation, remote access, IDaaS, and identity governance, and it has built a notable position in operational technology (OT) and industrial settings, where recording privileged access to sensitive systems is a security and regulatory requirement.

The company is small but public: annual recurring revenue reached 34.6 million euros at 30 September 2026, with nine-month revenue of 31.7 million euros, up 15.4 percent, and more than 4,000 customer organisations.

What it is good at

Session management is the core strength. The PAM product (long sold as WALLIX Bastion) vaults and rotates credentials and records every privileged session through an agentless, bastion-style proxy, so it stands up faster than the heaviest suites. The same model extends to browser-based applications through Web Session Manager and to third parties through VPN-less remote access.

OT coverage and European assurance are genuine differentiators. KuppingerCole named WALLIX an Overall Leader in its PAM 2026 Leadership Compass for the fifth year running, and its PAM product holds an accelerated security certification from Germany's BSI, recognized by France's ANSSI. For buyers working through NIS2 or national sovereignty requirements, an EU vendor with those certificates shortens procurement. It fits energy and utilities and manufacturing estates well.

The security record is also clean recently: NVD lists no WALLIX CVEs published in 2025 or 2026, the last being Bastion access-control flaws such as CVE-2023-46319 (fixed in 9.0.9 and 10.0.5), and none appears in the CISA KEV catalog (checked 2026-11-05).

Where it falls short

Secrets management and DevOps-native workflows are lighter than Idira (formerly CyberArk), now part of Palo Alto Networks, or HashiCorp Vault, so infrastructure-as-code teams will find gaps in dynamic secrets and pipeline integration. Outside Europe the partner ecosystem and support footprint are smaller, and North American buyers with a US-vendor preference will weigh the headquarters. WALLIX's own homepage now cites a Niche Player placement in the 2026 Gartner Magic Quadrant for PAM, down from Visionary in 2025, which some procurement teams will notice.

Pricing

Quote-based; no list prices published (checked 2026-11-05). The old pricing URL redirects to the homepage, and WALLIX offers free trials of PAM, IDaaS, and IAG instead of a rate card. Model it against global PAM leaders with the TCO calculator.

Best for, and who should look elsewhere

Choose WALLIX for European, OT, and session-centric PAM where straightforward deployment and EU certification matter. For the broad mid-market suite alternative, see WALLIX vs Delinea; for the enterprise reference tier, see CyberArk vs BeyondTrust; for cloud-native infrastructure access, see Teleport.

Bottom line

A strong EU-centric PAM for regulated European and industrial buyers who need session control and certification more than DevOps secrets depth.