Today we're introducing Cloud Sandboxes: same microVM isolation as Docker Sandboxes on your laptop, same CLI, always-on Docker-managed compute.
Close your laptop. Keep the agent running. Move between local and cloud with one command. $250 credit for new accounts:
Agent security isn't a new problem. It's a familiar one, moving faster than most defenses were built for.
Docker CISO Mark Lechner's take: the answer isn't more model guardrails. It's one isolated, verifiable boundary where agents do their work.
Watch the full talk:
New to Docker? Start with Docker in Practice: Build, Debug, and Deploy Containers from Docker Captain Steve Buchanan, the first course in the new Docker Foundations Professional Certificate on LinkedIn Learning: bit.ly/4yOJjv3
The isolation question for AI agents is getting more specific. Not 'is it sandboxed?' but 'what exactly does the boundary hold, and what can get past it?'
Sandbox Review on how to answer that, and what major coding agents are actually doing about isolation in production today:
