Today we're introducing Cloud Sandboxes: same microVM isolation as Docker Sandboxes on your laptop, same CLI, always-on Docker-managed compute.

Close your laptop. Keep the agent running. Move between local and cloud with one command. $250 credit for new accounts: docker.com/sbx-promo

There's a difference between permission systems and architectural guarantees. That distinction is what separates a contained failure from a production incident.

This piece by mgks.dev on what closing that gap requires, and what Docker committing the spec to the o/LYHTaRaM1O

Docker Captain @krisvelkov flew to the US for the first time to present at @WeAreDevs and wrote up his takeaways.

He explains what the microVM boundary in Docker Sandboxes actually enforces, how credential injection works, and what it feels like to see the Docker community at that scale: bit.ly/4jBVO9e

The official @band_hq kit for Docker Sandboxes is here.

One `sbx create` command connects an agent on the BAND platform to an isolated Docker Sandbox for local code, tool execution, and agent collaboration. Credentials never enter the sandbox: bit.ly/4z4HICd

Containers became the standard by solving a specific problem: making software portable and reproducible. @TheFuturumGroup frames the Kit Spec as a continuation of that, for agent authority.

Full analysis: bit.ly/4echUM7

Starting with a hardened base image is smart. But your app doesn't stop at the base layer.

@ActiveState is partnering with Docker to extend trust across more of the container stack, pairing Docker Hardened Images (DHI) with ActiveState’s trusted open-source components.

Details 4IhypO

firecrawl now plugs into @Docker sandboxes

your sandboxed ai agents can now search the live web and pull data from hundreds of sources with alexandria

Securing agentic software factories is top of mind for dev teams.

Agent Baseline participants recently published a reference architecture designed to do exactly that.

Learn more: agentbaseline.org/reference-arch…

What does it take to build AI that can hold a real conversation?

Seth Wright, AI product engineering leader at @My_CTM, joins Per on Ship Happens to talk about building voice AI, measuring quality, and how the engineer’s job is changing.

Watch the full episode: F

Agent security isn't a new problem. It's a familiar one, moving faster than most defenses were built for.

Docker CISO Mark Lechner's take: the answer isn't more model guardrails. It's one isolated, verifiable boundary where agents do their work.

Watch the full talk: youtu.be/yprhNWNkAnU

Where do you run your agents today?

New to Docker? Start with Docker in Practice: Build, Debug, and Deploy Containers from Docker Captain Steve Buchanan, the first course in the new Docker Foundations Professional Certificate on LinkedIn Learning: bit.ly/4yOJjv3

The isolation question for AI agents is getting more specific. Not 'is it sandboxed?' but 'what exactly does the boundary hold, and what can get past it?'

Sandbox Review on how to answer that, and what major coding agents are actually doing about isolation in production today: bit.ly/4ytvvWm

An agent that breaks something isn't broken. It's doing exactly what it was built to do, just not what you intended.

Docker’s Eric Jia and @srinisekaran on the five main agent security risks, why traditional app security wasn't built for them, and the incidents behind each one: bit.ly/4jnAdBj

The 2026 Stack Overflow survey is out. We’re honored Docker remains the most used and most desired cloud dev tool.

It also shows trust is the biggest gap in the agentic era: just 7% of developers trust AI for important work decisions. Docker CMO Terri Avnaim on extending trust .co/SGtpmTAgKo

Agents that can edit files and run commands can also game their own evals.

Harbor + Docker Sandboxes fix that: every eval task runs in an isolated microVM, with network policies for fair, reproducible runs.

bit.ly/4B8xf9Z

Too much Python boilerplate to get an agent running?

@BetterStackHQ covered how to use Docker Agent to simplify it: one YAML file, one command, agents talking to each other with nothing more than a URL. Real debugging demo and a battleship match to finish.

Watch here: bit.ly/4s3LUiV

We’re happy to be partnering with @chainloop_dev on their kit for Docker Sandboxes. 🤝

Docker secures where agents run. Chainloop governs what they ship.

Learn more here and try the kit today: bit.ly/4dGNe5j

Don’t babysit your agents. Put them in sandboxes. Each sandbox is a microVM with its own kernel. And now they run in the cloud, too.

Ready to try it out? New signups get $250 in Cloud Sandboxes credit. Claim yours before the promotion ends on October 31: docker.com/c/sbx-promo/

Docker Skills are now on the Cursor Marketplace.

10+ official skills for Docker Sandboxes, Dockerfiles, Compose, and Docker Agent. Give your agents the context to run safely and build faster, without starting from scratch.

/add-plugin docker-skills

cursor.com/marketplace/do…

Two events, two cities, one very eventful week.

Devoxx Belgium + World Summit AI Amsterdam: packed rooms, great questions, plenty of conversations around AI agents, security and governance - and yes,an AI agent on the loose at our booth.

Thank you to everyone who made the week such a good one.