How Autonomous AI Agents Become Secure by Design With NVIDIA OpenShell

Autonomous agents mark a new inflection point in AI. Systems are no longer limited to generating responses or reasoning through tasks. They can take action: Agents can read files, use tools, write and run code, and execute workflows across enterprise systems, all while expanding their own capabilities.

Application-layer risk grows exponentially when agents continuously improve and evolve. The NVIDIA OpenShell runtime is being built to address this.

Part of NVIDIA Agent Toolkit, OpenShell is an open source, secure-by-design runtime for running autonomous agents such as claws. It works by ensuring each agent runs inside its own sandbox, separating application-layer operations from infrastructure-layer policy enforcement.

This means security policies are out of reach of the agent - they're applied at the system level. Instead of relying on behavioral prompts, OpenShell enforces constraints on the environment the agent runs in - meaning the agent cannot override policies, or leak credentials or private data, even if compromised.

With OpenShell, enterprises can separate agent behavior, policy definition and policy enforcement. Organizations gain a single, unified policy layer to define and monitor how autonomous systems operate. Coding agents, research assistants and agentic workflows all run under the same runtime policies regardless of host operating system, simplifying compliance and operational oversight.

This is the browser tab model applied to agents: Sessions are isolated, resources are controlled and permissions are verified by the runtime before any action takes place.

Securing autonomous systems requires an integrated ecosystem. OpenShell is designed to add privacy and security controls for AI agents. NVIDIA is collaborating with security partners, including Cisco, CrowdStrike, Google Cloud, Microsoft Security and TrendAI, to align runtime policy management and enforcement for agents across the enterprise stack.

OpenShell Provides an Enterprise-Grade Sandbox for Building Personal AI Assistants NVIDIA NemoClaw is an open source reference stack that simplifies installing OpenClaw always-on assistants with the OpenShell runtime and NVIDIA Nemotron models in a single command.

NemoClaw provides enthusiasts with an open reference for building self-evolving personal AI agents, or claws. Since security needs vary, NemoClaw provides a reference example for policy-based privacy and security guardrails to give users more control over their agents' behavior and data-handling. Users can customize it for their specific use cases - much like adjusting security preferences for applications on a phone.

NemoClaw includes an example configuration of OpenShell that defines how the agent should interact with systems. NemoClaw uses open source models like NVIDIA Nemotron alongside OpenShell.

This enables self-evolving claws to run more securely in clouds, on premises or on personal computers, including NVIDIA GeForce RTX PCs and laptops or NVIDIA RTX PRO-powered workstations, as well as NVIDIA DGX Station and NVIDIA DGX Spark AI supercomputers.

Both OpenShell and NemoClaw are in early preview. NVIDIA is building in the open with the community and its partners to enable enterprises to scale self-evolving, long-running autonomous agents safely, confidently and in compliance with global security standards.

Get started with NVIDIA OpenShell and launch a ready to use environment on NVIDIA Brev, or explore the open source project on GitHub.

Watch NVIDIA CEO Jensen Huang's Keynote Hear from NVIDIA CEO Jensen Huang live on stage at SAP Center. Arrive early to catch the GTC Live 2026 pregame show for an insightful discussion on the latest in AI, accelerated computing and transformative tech with industry leaders.

Watch Now

Recent News

Corporate

NVIDIA GTC 2026: Live Updates on What's Next in AI March 19, 2026

Gaming

Smooth Moves: 90 Frames-Per-Second Virtual Reality Arrives on GeForce NOW March 19, 2026

Robotics

From Simulation to Production: How to Build Robots With AI March 18, 2026

Pro Graphics

More Than Meets the Eye: NVIDIA RTX-Accelerated Computers Now Connect Directly to Apple Vision Pro March 17, 2026

View All Recent News

Categories:

Generative AI

Software

Tags:

Agentic AI

Cybersecurity

Open Source

LINK:	https://blogs.nvidia.com/blog/secure-autonomous-ai-agents-openshell/...
	See more stories from nvidia

More from Nvidia