---
title: "Hijacked agents · Ataris"
description: "A legitimate customer's agent reads a poisoned page, then starts reading secrets, exfiltrating, scanning, or mining. Ataris catches the change from the host and gives you an alert to pass on."
canonical: "https://ataris.dev/use-cases/hijacked-agents"
last-updated: 2026-11-02
---
# When a customer's agent is hijacked, tell them first.

A legitimate customer's agent reads a poisoned page, then starts reading secrets, exfiltrating, scanning, or mining. Ataris catches the change from the host and gives you an alert to pass on.

## The account is real. The behavior isn't.

Signup checks and abuse rules trust paying customers. A hijacked agent runs under exactly that trust.

### 1. Baseline: What this customer usually does.

Destinations, upload volume, and CPU shape, per customer, seen from the host.

Example (acme · usual): destinations = github.com, own API; uploads = small.

### 2. Change: What changed.

A new destination, an upload spike, a scan or a miner on an account that never did that before.

Example (acme · vm-c21e): upload = 38 MB, first ever; then = SYN sweep.

### 3. Alert: An alert you can pass on.

Send it to the customer through your webhooks, or offer it as a premium security tier.

Example (webhook): to = customer contact; evidence = attached.

## Agent sandbox security your customers will pay for.

Turn host visibility into a feature.

- **Detect.** Changes in a customer's behavior. new destinations, exfiltration volume, scanning, mining.
- **Explain.** What the alert carries. timeline, flows, memory snapshot on request.
- **Deliver.** How it reaches the customer. webhooks, API, premium tier.

## Related

- [Hijacked-agent alerts](https://ataris.dev/product/hijacked-agent-alerts.md): When a customer's agent turns
- [AI agent sandboxes](https://ataris.dev/use-cases/agent-sandboxes.md): Firecracker, gVisor, Kata, containers
- [Guest memory inspection](https://ataris.dev/product/memory-inspection.md): Processes and binaries from a flagged VM

## Turn detection into a security tier.

Book a demo and we'll show how a hijacked-agent alert reaches your customer.

[Book a demo](https://ataris.dev/contact)