Palana (Part 1): Why Grab built a secure platform for autonomous AI Agents
Jul 24, 2026

Summary
This post introduces Palana, Grab's Kubernetes-native platform for running autonomous AI agents securely. It details the platform's design principles including isolation as the unit of trust, never giving credentials directly to the agent, making egress a control point via Envoy and OPA, and ensuring the control plane remains outside the agent. It also highlights the use of Kubernetes primitives for managing agent lifecycles and resources.
More from the AI-Assisted Analytics trail
- Grab Bench: Evaluating AI on Grab-shaped production work
- How AI is transforming analytics at Grab
- Palana (Part 2): Architecting isolation, identity, and auditability for AI agents
- Agent platform (Part 1): How we help Grab build and run AI agents at scale
- From firefighting to building: How AI agents restored our team’s core productivity