Orange Cyberdefense taps Mistral AI's Large 4 for cyber defense

Orange Cyberdefense has signed a partnership with Mistral AI to build AI-powered cybersecurity tools, gaining early access to a version of Mistral Large 4, a model the companies describe as having frontier capabilities in cyber tasks.

The deal, announced by the Orange subsidiary and the Paris-based AI developer, targets one of the most labour-intensive corners of the security business: detecting, investigating and responding to cyber threats before attackers can move. The two firms will initially concentrate on penetration testing, which probes IT systems for weaknesses, and incident investigation, which reconstructs how an attack unfolded.

The announcement arrives as attackers themselves adopt automation. Orange Cyberdefense CEO Hugues Foulon framed the partnership as a scaling exercise rather than a marketing exercise in novelty. "As threats become ever faster, industrialised and now automated, defense must operate at a different scale," Foulon said. "Volume, speed, trust: these are the three challenges facing cybersecurity in the age of AI."

What will the AI actually do?

According to Orange, the partnership will embed AI tools gradually into selected Orange Cyberdefense services. The intended use cases are concrete rather than speculative:

• exploring more potential attack scenarios during penetration testing;
• analysing evidence after incidents;
• establishing how breaches occurred and how attackers moved through systems.

The stated goal is to speed up security operations while keeping cybersecurity experts in charge of important decisions. That distinction matters for a market where buyers remain wary of autonomous AI agents acting on critical infrastructure.

Orange says safeguards will include controlled access to the models, activity tracking, security testing and human oversight, with specialists remaining responsible for critical decisions. In other words, the AI accelerates the investigative grind; humans sign off on the consequential calls.

Why European sovereignty sits at the centre

The second pillar of the deal is data sovereignty. Mistral AI's technology will run on computing infrastructure based in Europe, a point both companies stressed. For Orange, which markets cyber defense to businesses and public bodies across the region, European-hosted AI answers a growing demand from customers who must comply with EU data rules and who want to reduce dependence on US-based cloud and model providers.

Foulon cast the partnership in explicitly European terms. "With Mistral AI, we are building European cyber AI, trained by our experts and operated under their control," he said. "By combining the power of AI, the expertise of our teams and our Cyber Threat Intelligence, we are accelerating our response so that we can protect more broadly, more quickly and with trusted European technology."

Mistral AI Co-Founder and CTO Timothée Lacroix positioned the deal the same way. "We are proud to partner with Orange Cyberdefense, one of Europe's cybersecurity leaders, and to bring them Mistral Large 4, a model with frontier capabilities in cyber," Lacroix said. "Together, we share one goal: giving European organisations a sovereign, trusted AI solution to defend themselves, built and operated in Europe."

Early access, not a finished product

The commercial reality is that this is a development agreement rather than a product launch. Orange Cyberdefense receives early access to a version of Mistral Large 4, and the tools will enter services selectively over time. Neither company has published pricing, deployment dates or customer numbers, so the measurable impact on Orange's security revenue remains to be seen.

What the deal does signal is direction. A major European telecom's security arm has chosen a European model builder over the larger US AI vendors for its most sensitive workflows, betting that sovereignty and expert control will sell as strongly as raw model performance. The first proof points will come as the penetration-testing and incident-investigation tools move from the lab into selected Orange Cyberdefense services.