Chainguard Launches Workspaces Beta to Isolate Coding Agents in microVMs
Seattle – October 14, 2026 -- Chainguard has launched Chainguard Workspaces in Beta, giving every developer and coding agent its own hardened microVM with no access to sensitive credentials and optional egress policies that block any connection a team has not approved.
Chainguard moves agent protection from the agent to its environment
The company argues that most coding agents today hold the same access as the developer who launched them, sitting next to credentials, cloud keys and production systems. Controls such as permission prompts and allowlists depend on the agent following the rules. Many developers now run a dozen agents or more at once, forcing teams to choose between granting broad access and approving prompts all day.
Chainguard CEO and Co-founder Dan Lorenc said teams are choosing between letting agents run next to production keys and babysitting them, and that "neither one scales."