---
title: "Host sensor · Ataris"
description: "The Ataris sensor runs on the host, outside every sandbox. It works with containers, gVisor, Firecracker, Cloud Hypervisor, and Kata, and deploys as a Helm chart or a Linux package, with low overhead."
canonical: "https://ataris.dev/product/host-sensor"
last-updated: 2026-11-02
---
# One eBPF sensor per host. Nothing in the guest.

The Ataris sensor runs on the host, outside every sandbox. It works with containers, gVisor, Firecracker, Cloud Hypervisor, and Kata, and deploys as a Helm chart or a Linux package, with low overhead.

## Sandbox runtime security that lives where sandboxes can't reach.

An agent inside the guest can be seen, stopped, or lied to by whatever runs there. A sensor on the host can't. That is the whole design.

### 1. Install: Helm chart or Linux package.

On Kubernetes, the sensor runs as a DaemonSet from a Helm chart. Elsewhere, install the Linux package on each host. Guest images don't change.

Example (deploy): kubernetes = Helm chart · DaemonSet; bare hosts = Linux package; guest images = unchanged.

### 2. Attach: eBPF on the host kernel.

The sensor attaches eBPF programs on the host and attributes what it sees to each sandbox: its network interface, its VMM process, its vCPUs and block devices.

Example (host-a17 · sensor): collector = eBPF; sandboxes seen = 38; guest agent = none.

### 3. Report: Detections out, nothing in.

Detections flow to the case queue, the API, and your webhooks. The sensor is read-only toward sandboxes: it never blocks, kills, or bans.

Example (outputs): case queue = on; API = on; webhooks = abuse-tools, slack.

## Where it runs.

One sensor, every isolation layer in a mixed fleet.

- **Runtimes.** Isolation layers covered. containers (runc), gVisor, Firecracker, Cloud Hypervisor, Kata.
- **Deploy.** How it gets on the host. Helm chart (DaemonSet), Linux package, no guest changes.
- **Outputs.** Where detections go. case queue UI, API, webhooks.

## Related

- [Abuse detection](https://ataris.dev/product/abuse-detection.md): Mining, scanning, spam, farmed free tiers
- [Escape tripwires](https://ataris.dev/product/escape-tripwires.md): Know if anything breaks isolation
- [AI agent sandboxes](https://ataris.dev/use-cases/agent-sandboxes.md): Firecracker, gVisor, Kata, containers

## See it on a host like yours.

Book a demo and we'll walk through deployment on your runtime.

[Book a demo](https://ataris.dev/contact)