DXC Technology Co. today announced a partnership with security startup Primary that makes the information technology services company the exclusive managed services partner for Primary’s zero-trust platform for enterprise artificial intelligence.

The joint offering governs how artificial intelligence agents and AI applications inside a company reach data. Identity checks and access policy sit in front of those systems, and the requests they make are logged for compliance teams. DXC will deliver the service through its global cybersecurity organization, covering consulting, implementation, integration, governance and ongoing operations.

Both companies are pitching the offering against enterprise security tooling built for users, devices and networks. Agents do not fit that model. They run on their own schedule, call other tools and reach across systems that were never designed for software making its own decisions.

Primary enforces attribute-based access control through a policy engine, and its identity layer treats users, agents, services and devices as one population. The company says it records agent prompts, responses and tool calls. Access is enforced at the session layer, with data loss prevention applied to what moves in and out. Primary also ships a software development kit for teams that want the controls built directly into their own applications.

Primary is led by co-founder and Chief Executive Greg Marx, with co-founder Michael Marx as president. Peiter “Mudge” Zatko, the former Twitter security chief, heads a unit at the company called Primary Labs.

Dawn-Marie Vaughan, DXC’s cybersecurity global offering lead, said governance has to move as fast as the AI rollouts it covers. Trusted AI takes “more than securing infrastructure,” she said. What matters is control over how AI systems reach data, identities and business processes.

Michael Marx said the harder problem is not watching what an agent is doing but having enough context to decide “whether that action should be allowed,” along with the infrastructure to enforce that call in real time. The two companies are aiming the platform first at organizations in highly regulated industries, where data sovereignty and audit requirements are tightest.

Revenue in DXC’s first quarter of fiscal 2027 was $3 billion, with organic revenue down 6.7%. Bookings rose 5%. Shares fell about 9% after the July 30 report. DXC used the same presentation to promote its own AI work, including an agentic security operations platform it says cut analyst handling time from 80 minutes to four.

Image: Primary