Sonrai's WALLy Wants to Fix Your Cloud Permissions, Not Just Report Them

Sonrai Security has introduced WALLy, an AI security agent it pitches as the first designed to fix cloud privilege risk rather than merely identify it — the next step in a product strategy that has been unusually consistent: stop selling findings, start selling outcomes.

What WALLy does

Where a scanner produces a report and a ticket queue, WALLy acts: automatically removing unnecessary privileges, enforcing just-in-time access, and blocking risky permissions across an organization's cloud footprint. Notably, its scope covers not just humans and machine identities but AI agents and third parties — an acknowledgment that the fastest-growing population of over-privileged identities in most clouds is no longer people.

That's the quietly clever positioning. Every enterprise deploying AI agents is minting new identities with broad permissions and no common-sense judgment. Securing agents with an agent may sound like marketing symmetry, but the underlying problem — privilege sprawl at machine speed — is real and getting worse.

Building on the firewall

WALLy extends the Cloud Permissions Firewall the company launched in April 2024, which made least-privilege a one-click global policy instead of a thousand-ticket project. The firewall built the enforcement rails; the agent now drives on them.

For the Fredericton-rooted engineering team behind the platform — the Q1 Labs lineage we never tire of tracing — it's another swing at a pattern this cluster keeps repeating: find the operational pain inside a security category, and automate the part everyone else just dashboards.

Sources

• Sonrai Security Introduces WALLy — GlobeNewswire product announcement
• Unveiling the Sonrai Cloud Permissions Firewall — prior firewall launch that WALLy extends