---
title: "Your own agent fleet · Ataris"
description: "Agents you run on your own infrastructure read untrusted input all day. Ataris watches each sandbox from the host and catches a hijacked agent exfiltrating, scanning, or mining, or a sandbox escape, with nothing installed in the guest."
canonical: "https://ataris.dev/use-cases/own-agent-fleet"
last-updated: 2026-11-02
---
# Watch your own agents from the host.

Agents you run on your own infrastructure read untrusted input all day. Ataris watches each sandbox from the host and catches a hijacked agent exfiltrating, scanning, or mining, or a sandbox escape, with nothing installed in the guest.

## Your agents, your hosts, the same blind spot.

Putting agents in microVMs or containers isolates them. It doesn't tell you what they do once a poisoned page or package steers them. The host sees that.

### 1. Baseline: Know each agent's normal.

The destinations it reaches, how much it uploads, how hard it runs the CPU, per sandbox, seen from the host.

Example (vm-a201 · usual): destinations = github.com, internal API; uploads = small.

### 2. Catch: Catch the turn.

A new destination, an upload spike, a scan, or a miner where there was none. Ataris opens a case with the timeline and the flows.

Example (vm-a201): upload = 38 MB, first ever; dest = 198.51.100.23:443.

### 3. Contain: Know if it got out.

Escape tripwires around the VMM tell you whether anything crossed from the sandbox onto the host.

Example (vmm-12): tripwires = armed; fired = 0.

## For teams running their own agents.

The same sensor and rules providers use, on your own fleet.

- **Detect.** On your agents. exfiltration, scanning, mining, sandbox escapes.
- **Evidence.** Attached to the case. flow timeline, memory snapshot of a flagged microVM, host and sandbox.
- **Deploy.** On your hosts. Helm or Linux package, no change to agent images, API and webhooks.

## Related

- [Hijacked agents](https://ataris.dev/use-cases/hijacked-agents.md): A paying customer's agent turns
- [Sandbox escapes](https://ataris.dev/use-cases/sandbox-escapes.md): Breakouts from runc, gVisor, Kata, KVM
- [Host sensor](https://ataris.dev/product/host-sensor.md): eBPF on the host, Helm or Linux package

## See what your agents really do.

Book a demo and we'll walk through Ataris on your agent runtime.

[Book a demo](https://ataris.dev/contact)