Nvidia opens its agent security sandbox to all, debuts chip-level monitoring

Nvidia's OpenShell, an open-source security sandbox for AI agents, is now generally available to all users, alongside a new chip-level monitoring tool called Sentry.

OpenShell was first announced at Nvidia's GTC conference in March and now enters general release. It contains agents as they carry out tasks and isolates their activity in the operating system kernel, the foundational program that can reach nearly every part of a computer, which limits what an agent can actually access.

The new Sentry runs on Nvidia's Bluefield programmable DPUs and is positioned as a second mechanism independent of the sandbox: it continuously monitors long-running agents and quarantines those that try to move outside their boundaries. Both now sit under an open-source framework called the Open Agent Safety Platform.

The launch follows months of disclosed incidents in which AI agents hacked other companies and probed US and Australian government websites. Nvidia says dozens of companies including Anthropic, Microsoft and Salesforce are collaborating, but WIRED reports it is unclear whether the full partner list has adopted the tools, and OpenAI's participation is left ambiguous.