---
title: "AI agent sandboxes · Ataris"
description: "Sandbox platforms give code-executing agents a VM in seconds. Ataris watches every sandbox from the host for abuse, escapes, and hijacked agents, with nothing added to your sandbox images."
canonical: "https://ataris.dev/use-cases/agent-sandboxes"
last-updated: 2026-11-02
---
# Agent sandbox security, built for the platform.

Sandbox platforms give code-executing agents a VM in seconds. Ataris watches every sandbox from the host for abuse, escapes, and hijacked agents, with nothing added to your sandbox images.

## Instant sandboxes attract instant abuse.

Fast boot and free credits are the product. They are also exactly what miners and scanners want.

### 1. Abuse: Free sandboxes, farmed.

Mining, scanning, and spam from free and trial accounts, caught from the host within minutes of boot.

Example (sandbox sb-91f): booted = +0.4 s; mining = +3 min.

### 2. Escapes: The isolation is the product.

Tripwires on Firecracker, gVisor, Kata, and runc tell you if a sandbox ever broke out.

Example (firecracker): tripwires = armed; fired = 0.

### 3. Customers: Hijacked agents.

When a paying customer's agent turns, alert them, or sell it to them as a security tier.

Example (acme): change = upload spike; to = customer webhook.

## Built for sandbox runtimes.

Ataris runs alongside the isolation you already use.

- **Runtimes.** Supported. Firecracker, gVisor, Kata, Cloud Hypervisor, containers.
- **Detections.** Across the fleet. abuse, escape tripwires, hijacked agents.
- **Fit.** With your platform. no image changes, Helm or Linux package, API and webhooks.

## Related

- [Hijacked agents](https://ataris.dev/use-cases/hijacked-agents.md): A paying customer's agent turns
- [Sandbox escapes](https://ataris.dev/use-cases/sandbox-escapes.md): Breakouts from runc, gVisor, Kata, KVM
- [Host sensor](https://ataris.dev/product/host-sensor.md): eBPF on the host, Helm or Linux package

## Secure the sandbox platform.

Book a demo and we'll walk through Ataris on your sandbox runtime.

[Book a demo](https://ataris.dev/contact)