Technology Radar
We've previously recommended sandboxed execution for coding agents. As AI agents become increasingly autonomous and capable of acting not only in coding environments but also in business systems, restricting their operational scope has become critical. We now consider agent sandboxing a sensible default for all agents. Running agents in isolated environments with restricted privileges and access to external systems reduces the risk and limits the impact of unexpected behavior, unintended actions or malicious exploitation.
We recommend teams apply a risk-based approach to sandboxing, informed by threat modeling of their agents and systems. Although there is no one-size-fits-all solution, recent security headlines reinforce the importance of applying established security practices, such as the principle of least privilege, when building and running agents.
