Google Cloud launches Agent Compute Engine to isolate AI agents
Google Cloud launched Agent Compute Engine, a service running each AI agent in a hardware-isolated microVM while keeping credentials outside the sandbox.
By GennnAi··1 min read
The service supports Gemini, internal teams and enterprise customers. Google says most agent sessions sit idle, so idle detection lets a host checkpoint a sandbox's state and run far more sessions per node. The microVMs hold no persistent secrets or OAuth tokens; requests go through proxies that apply credentials outside the sandbox. Administrators define which resources an agent can reach, and requests are checked against policy.
Source: SecurityBrief Asia, published on November 6, 2026.