Agentic AI Security: What CISOs Say About Governing AI Agents

This post details the security challenges and best practices for governing AI agents in enterprise environments, emphasizing the need for isolation, control, and observation. It highlights Docker's approach of running AI agents in disposable, isolated, local sandboxes (Docker Sandboxes) and the integration with NanoClaw for secure-by-design agent execution using MicroVMs. It also discusses the implications of laptops becoming the new production environment for agents, the concept of portability for agent environments, and strategies for securing the AI supply chain, including keeping humans in the loop and layering security. The post also touches upon the MCP Gateway as a chokepoint for agent tool calls.