Kyndryl Holdings Inc. (NYSE: KD) has opened a Cyber Defense Operations Center in Paris that combines network operations, cybersecurity operations and AI-enabled intelligence in one operating model. The company said the center is intended to give European customers more coordinated visibility and response as cloud, data-center, edge and third-party environments make security incidents harder to isolate.
The new site is Kyndryl’s first Cyber Defense Operations Center in Europe, according to the company. It joins the managed-infrastructure provider’s broader network of network operations centers and security operations centers across North America, Europe, Asia-Pacific and Latin America. Kyndryl said the Paris operation will draw on local specialists as well as its delivery organization in more than 60 countries.
For security and infrastructure teams, the material change is the attempt to bring signals from network, security and operational domains into a shared response process. An availability problem, suspicious traffic and a business-service disruption can stem from related causes but reach different operations teams through separate tools. Coordinating those teams and their data is a practical challenge during an incident, particularly when a cloud service, on-premises system and outside provider are involved.
Kyndryl said its Kyndryl Bridge platform will serve as a control layer for the center by combining operational data, AI and automation. The company said the platform can help customers identify anomalies earlier, prioritize risks and take preventative action before problems affect critical business services. It did not disclose the data sources, detection methods, response playbooks or service-level commitments that would determine how the approach performs in a particular customer environment.
The center also incorporates more than a dozen technology alliances and partnerships spanning threat detection, vulnerability management, security automation, incident response and network monitoring, according to the company. That ecosystem may give customers access to different tools without a single-vendor security stack, but organizations would still need to assess integration coverage, telemetry quality and ownership of response actions across their own environments.
The Paris operation is aimed in part at organizations working through European resilience and sovereignty requirements. Kyndryl cited the Digital Operational Resilience Act, growing cyber threats and the operational demands created by AI and distributed infrastructure as factors behind the investment. Those pressures have increased the value of correlating events across security and network operations rather than treating them as unrelated queues.
Kyndryl also cited its 2026 State of Modernization Report, which found that 68% of surveyed organizations are expanding use of at least four technology environments at once. In France, the company said 59% of organizations reported delivery disruption, project delays or operational downtime as modernization challenges. Those figures describe Kyndryl’s research and do not independently establish the center’s effectiveness.
The center does not itself eliminate the operational work of setting access policies, approving automated changes or rehearsing incident procedures. Kyndryl said customers will use the service to move from reactive monitoring toward proactive cyber resilience. Its value for an IT organization will depend on how well the shared operations model connects to existing security tools, service-management processes and the systems that teams are authorized to change during an incident.