--- description: NVIDIA Open Agent Safety Platform pairs OpenShell on the CPU with a BlueField-4 Sentry that quarantines rogue agents in milliseconds. title: "NVIDIA Open Agent Safety Platform: OpenShell on the CPU, Sentry on BlueField-4, and 100-Plus Partners From Anthropic to SpaceXAI" image: https://www.storagereview.com/wp-content/uploads/2026/09/StorageReview-nvidia-openshell.png --- [![Storage Review]()](https://storagereview.com/) --- [Facebook](https://www.facebook.com/@storagereview) [X (Twitter)](https://twitter.twitter.com/storagereview) [Instagram](https://www.instagram.com/storagereview/) [LinkedIn](https://www.linkedin.com/company/storagereview-com) [YouTube](https://www.youtube.com/user/storagereview?sub_confirmation=1) [Email](mailto:info@storagereview.com) [Spotify](https://open.spotify.com/show/1y6VnznABhHeOSMOmbDTz0) [Reddit](https://www.reddit.com/r/StorageReview/) [Discord](https://discord.gg/TwMHb4azdC) [RSS Feed](https://www.storagereview.com/rss.xml) [TikTok](https://www.tiktok.com/@storagereview) [Facebook](https://www.facebook.com/@storagereview) [X (Twitter)](https://twitter.com/storagereview) [Instagram](https://www.instagram.com/storagereview/) [LinkedIn](https://www.linkedin.com/company/storagereview-com) [YouTube](https://www.youtube.com/user/storagereview?sub_confirmation=1) [Email](mailto:info@storagereview.com) [Spotify](https://open.spotify.com/show/1y6VnznABhHeOSMOmbDTz0) [Reddit](https://www.reddit.com/r/StorageReview/) [Discord](https://discord.gg/TwMHb4azdC) [RSS Feed](https://www.storagereview.com/rss.xml) [TikTok](https://www.tiktok.com/@storagereview) [![StorageReview.com](https://www.storagereview.com/wp-content/uploads/2026/07/Storage-Review-2x.png)](https://www.storagereview.com) ≡ Menu - [Home](https://www.storagereview.com/) - [Storage Reviews](https://www.storagereview.com/review) - [End User Reviews](https://www.storagereview.com/consumer) - [Enterprise Reviews](https://www.storagereview.com/enterprise) - [Ubiquiti Reviews](https://www.storagereview.com/best/ubiquiti-reviews) - [SR Merch](https://store.storagereview.com) - [Leaderboards](https://www.storagereview.com/best) - [Best Storage Arrays](https://www.storagereview.com/best/storage-arrays) - [Best Enterprise SSDs](https://www.storagereview.com/best/enterprise-ssds) - [Best Servers](https://www.storagereview.com/best/servers) - [Best Enterprise GPUs](https://www.storagereview.com/best/enterprise-gpus) - [Best Desktops for Local AI](https://www.storagereview.com/best/desktops-local-ai) - [Best Laptops for Local AI](https://www.storagereview.com/best/laptops-local-ai) - [Best Local LLM Tools](https://www.storagereview.com/best/local-llm-tools) - [Agentic AI Hardware](https://www.storagereview.com/best/agentic-ai-hardware) - [Best SSDs & Hard Drives](https://www.storagereview.com/best_drives) - [Best Portable SSDs](https://www.storagereview.com/best/portable-ssds) - [Best Business Laptops](https://www.storagereview.com/best/business-laptops) - [Best Mobile Workstations](https://www.storagereview.com/best/mobile-workstations) - [Best Desktop Workstations](https://www.storagereview.com/best/desktop-workstations) - [Best Mini PCs](https://www.storagereview.com/best/mini-pcs) - [Best Laptop Battery Life](https://www.storagereview.com/best/laptop-battery-life) - [Storage Reference Guide](https://www.storagereview.com/storage-reference-guide) - [About SR](https://www.storagereview.com/about-storagereview) - [StorageReview.com Sweepstakes Rules and Regulations](https://www.storagereview.com/storagereview-com-sweepstakes-rules-and-regulations) Search [Home](https://www.storagereview.com/) » [News](https://www.storagereview.com/news) » NVIDIA Open Agent Safety Platform: OpenShell on the CPU, Sentry on BlueField-4, and 100-Plus Partners From Anthropic to SpaceXAI # NVIDIA Open Agent Safety Platform: OpenShell on the CPU, Sentry on BlueField-4, and 100-Plus Partners From Anthropic to SpaceXAI by Harold Fritts on September 28, 2026 [AI](https://www.storagereview.com/enterprise/ai)  ◇  [Enterprise](https://www.storagereview.com/enterprise) NVIDIA has launched the NVIDIA Open Agent Safety Platform, an open software platform and reference system design that puts guardrails around autonomous AI agents at two layers: a secure runtime on the host CPU and an out-of-band watchdog on the DPU that the agent can’t see. NVIDIA says the pattern in recent agent security incidents has been the same each time, with the agent circumventing application-layer controls to finish its assigned task, and its answer is to move enforcement below the application. More than 100 organizations are working with the platform at launch, including Anthropic, Cisco, CrowdStrike, Dell Technologies, HPE, Microsoft, Palantir, Red Hat, Salesforce, SAP, Scale AI, ServiceNow, and SpaceXAI. ![NVIDIA Open Agent Safety Platform context: Jensen Huang on stage at GTC 2026 in front of the NemoClaw reference agent diagram, with the OpenShell sandbox runtime highlighted among the tools, memory, and model components](https://www.storagereview.com/wp-content/uploads/2026/09/StorageReview-nvidia-openshell.png) “AI’s extraordinary potential for society will only be realized if we solve AI safety,” said Jensen Huang, founder and CEO of NVIDIA. “As we continue to discover the frontier of AI capabilities, we must accelerate discovery at the frontier of AI safety. Safety and security require full-stack engineering. NVIDIA Open Agent Safety Platform brings together industry, researchers, and public-sector organizations to share best practices, align on evaluation methods, and foster international cooperation. Together, we can raise the bar for global AI safety.” ## OpenShell: A Runtime Boundary on the CPU The software half is NVIDIA OpenShell, the secure runtime that first appeared in the [NemoClaw reference stack at GTC 2026](https://www.storagereview.com/news/nvidia-gtc-2026-rubin-gpus-groq-lpus-vera-cpus-and-what-nvidia-is-building-for-trillion-parameter-inference) and has since shown up in the [Dell](https://www.storagereview.com/news/dell-expands-ai-factory-with-nvidia-adds-deskside-agentic-ai-and-deepens-mistral-collaboration), [HPE](https://www.storagereview.com/news/hpe-expands-ai-factory-portfolio-for-agentic-ai-deployments), and [SUSE](https://www.storagereview.com/news/suse-unveils-ai-factory-with-nvidia-highlights-enterprise-sovereignty-gap) AI Factory stacks. NVIDIA now calls it broadly available. OpenShell runs agents in sandboxed environments with kernel-level isolation, converts an operator’s instructions into verifiable policies before the agent starts, and enforces those policies during execution: which files, networks, tools, processes, and credentials the agent can touch. The boundary sits outside the model and the agent harness, so it applies the same way to open and closed models. The code is on GitHub under an Apache 2.0 license. NVIDIA says OpenShell runs with minimal overhead on NVIDIA Vera, which the company calls the first purpose-built CPU for agentic AI, and because it’s open source, it can be extended to third-party platforms, including Arm and Intel processors. ## Sentry: In-Silicon Enforcement on BlueField-4 The hardware half is NVIDIA Sentry, the reference system design’s out-of-band watchdog, which runs on NVIDIA BlueField-4 DPUs and monitors agent behavior from a trust domain the agent and any attacker can’t reach. NVIDIA describes it as in-silicon enforcement: if an agent tries to move outside its software boundary, Sentry quarantines and stops it in milliseconds. It combines threat detection, hardware-based agent governance, and data access protection, and it operates independently of the host, so a compromised agent runtime doesn’t take the watchdog with it. Sentry is built on NVIDIA DOCA, which supplies the programmability to inspect agent requests and responses, provide attested telemetry, verify agent identity, and enforce granular zero-trust access policies for data, tools, APIs, and services. NVIDIA’s technical blog notes that in Vera Rubin POD systems, the BlueField-4 sits on the node’s only path to the model, which is what lets Sentry observe and enforce at line speed without the host’s cooperation. ## Who’s Building With It Anthropic and NVIDIA have paired the platform with Claude Managed Agents, which already separates the agent loop from the sandboxes where its work executes by running the two on different servers; OpenShell and BlueField integrations let enterprises enforce strict control over what agents can reach through those sandboxes. “Companies are giving AI agents more of their most important work, and they need to direct and verify what those agents do, especially in sensitive environments,” said Paul Smith, chief commercial officer of Anthropic. “Claude Managed Agents gives companies a clear view of what each agent is doing, and NVIDIA’s platform adds another layer of governance and control across hardware and software.” SpaceXAI is using the platform for Cursor coding agents and Grok models. “As customers rely more on agents to get real work done, safety should be enforced outside the model by additional controls the agent can’t get past,” said Mike Nicolls, president at SpaceXAI. “Customers should be able to set those limits for Cursor and Grok and trust they will hold.” Scale AI is incorporating the technologies into the agentic infrastructure layer of its Scale GenAI Portfolio for enterprise and government customers, citing isolation, policy enforcement, and auditability. On the application side, Salesforce and NVIDIA have integrated OpenShell with Slack so teams can view agent activity and audit events and approve or reject an agent’s requests for additional permissions from inside Slack. SAP is embedding OpenShell with the Joule Studio runtime on the SAP Business AI Platform, contributing engineering work to OpenShell, and working on interoperability standards through the Open Secure AI Alliance. Figure, Gecko Robotics, and Skild AI are building with OpenShell to put agent safety controls into robots that act in the physical world, and Citi and JPMorganChase are collaborating on shared open-source agent safety technologies for financial services, alongside a group of energy and grid operators that includes Hitachi Energy, EPRI, NextEra Energy, Schneider Electric, and Siemens Energy. Canonical, SUSE, and Red Hat are integrating the platform into their operating systems, and Red Hat runs OpenShell and DOCA on Red Hat AI Factory with NVIDIA across hybrid cloud environments. Infrastructure partners offering systems and services that support the platform include Baseten, Cisco, CoreWeave, Dell Technologies, GMI Cloud, HPE, HP Inc., Lenovo, Microsoft, Nebius, Oracle Cloud Infrastructure, Supermicro, and Together AI. ## Availability NVIDIA Open Agent Safety Platform software, including OpenShell and its skills, is available now through NVIDIA’s developer resources and GitHub. The platform feeds into the Open Secure AI Alliance, which NVIDIA initiated with more than 120 organizations and which is governed by the Linux Foundation; the alliance runs open research, skills, and tools for agent security, along with projects such as the Shared AI Findings Exchange, or SAFE. ### [NVIDIA Open Agent Safety Platform](https://www.nvidia.com/en-us/solutions/ai/agent-safety/) **Engage with StorageReview** [Newsletter](https://www.storagereview.com/storage_newsletter) |  [YouTube](https://www.youtube.com/user/StorageReview "Opens in a new window") | Podcast  [iTunes](https://podcasts.apple.com/gb/podcast/storagereview-com-storage-reviews/id1060681115 "Opens in a new window")/ [Spotify](https://open.spotify.com/show/1y6VnznABhHeOSMOmbDTz0 "Opens in a new window") |  [Instagram](https://www.instagram.com/storagereview/ "Opens in a new window") |  [Twitter](https://twitter.com/storagereview "Opens in a new window") |  [TikTok](https://www.tiktok.com/@storagereview? "Opens in a new window") |  [RSS Feed](https://www.storagereview.com/rss.xml) ![]() ### Harold Fritts I have been in the tech industry since IBM created Selectric. My background, though, is writing. So I decided to get out of the pre-sales biz and return to my roots, doing a bit of writing but still being involved in technology. Previous post: [AMD Posts the Full EPYC 9006 SKU List: 31 Venice Parts From $700 to $14,904 Across SP7 and SP8](https://www.storagereview.com/news/amd-posts-the-full-epyc-9006-sku-list-31-venice-parts-from-700-to-14904-across-sp7-and-sp8) Next post: [Synopsys Certifies A14 EDA Flows With TSMC and Tapes Out 64G UCIe on 2nm and 3nm, With PCIe 7.0 and HBM4 IP on N2P](https://www.storagereview.com/news/synopsys-tsmc-a14-certification-64g-ucie-tape-outs) Trusted Vendors Products and solutions from our affiliate partners: - [ ![Ubiquiti Logo](https://www.storagereview.com/wp-content/uploads/2024/11/2-1.webp) Ubiquiti ](https://store.ui.com/us/en?a_aid=StorageReview "Opens in a new window") - [ ![Newegg Logo](https://www.storagereview.com/wp-content/uploads/2025/11/newegg.webp) Newegg ](https://click.linksynergy.com/fs-bin/click?id=g5terNMDhz0&offerid=1207190.18&subid=0&type=4 "Opens in a new window") - [ ![Amazon Logo](https://www.storagereview.com/wp-content/uploads/2025/11/amazon.webp) Amazon ](https://amzn.to/4fLJUEW "Opens in a new window") Newsletter Subscribe to the StorageReview newsletter to stay up to date on the latest news and reviews. We promise no spam! 1 Leave this field empty if you’re human: ## Advertisement Content Categories [Facebook](https://www.facebook.com/@storagereview) [X](https://twitter.com/storagereview) [Instagram](https://www.instagram.com/storagereview/) [LinkedIn](https://www.linkedin.com/company/storagereview-com) [YouTube](https://www.youtube.com/user/storagereview?sub_confirmation=1) [Email](mailto:info@storagereview.com) [Spotify](https://open.spotify.com/show/1y6VnznABhHeOSMOmbDTz0) [Reddit](https://www.reddit.com/r/StorageReview/) [Discord](https://discord.gg/TwMHb4azdC) [RSS](https://www.storagereview.com/rss.xml) [TikTok](https://www.tiktok.com/@storagereview) Copyright © 1998-2025 Flying Pig Ventures, LLC Cincinnati, Ohio. All rights reserved. Manage your privacy To provide the best experiences, we and our partners use technologies like cookies to store and/or access device information. Consenting to these technologies will allow us and our partners to process personal data such as browsing behavior or unique IDs on this site and show (non-) personalized ads. Not consenting or withdrawing consent, may adversely affect certain features and functions. Click below to consent to the above or make granular choices. Your choices will be applied to this site only. You can change your settings at any time, including withdrawing your consent, by using the toggles on the Cookie Policy, or by clicking on the manage consent button at the bottom of the screen. Functional Functional Always active The technical storage or access is strictly necessary for the legitimate purpose of enabling the use of a specific service explicitly requested by the subscriber or user, or for the sole purpose of carrying out the transmission of a communication over an electronic communications network. Preferences Preferences The technical storage or access is necessary for the legitimate purpose of storing preferences that are not requested by the subscriber or user. Statistics Statistics The technical storage or access that is used exclusively for statistical purposes. The technical storage or access that is used exclusively for anonymous statistical purposes. Without a subpoena, voluntary compliance on the part of your Internet Service Provider, or additional records from a third party, information stored or retrieved for this purpose alone cannot usually be used to identify you. Marketing Marketing The technical storage or access is required to create user profiles to send advertising, or to track the user on a website or across several websites for similar marketing purposes. Statistics Marketing Features Always active Always active - Manage options - Manage services - Manage {vendor\_count} vendors - [Read more about these purposes](https://cookiedatabase.org/tcf/purposes/) Accept Deny Manage options Save preferences Manage options - {title} - {title} - {title} Manage your privacy To provide the best experiences, we use technologies like cookies to store and/or access device information. Consenting to these technologies will allow us to process data such as browsing behavior or unique IDs on this site. Not consenting or withdrawing consent, may adversely affect certain features and functions. Functional Functional Always active The technical storage or access is strictly necessary for the legitimate purpose of enabling the use of a specific service explicitly requested by the subscriber or user, or for the sole purpose of carrying out the transmission of a communication over an electronic communications network. Preferences Preferences The technical storage or access is necessary for the legitimate purpose of storing preferences that are not requested by the subscriber or user. Statistics Statistics The technical storage or access that is used exclusively for statistical purposes. The technical storage or access that is used exclusively for anonymous statistical purposes. Without a subpoena, voluntary compliance on the part of your Internet Service Provider, or additional records from a third party, information stored or retrieved for this purpose alone cannot usually be used to identify you. Marketing Marketing The technical storage or access is required to create user profiles to send advertising, or to track the user on a website or across several websites for similar marketing purposes. Statistics Marketing Features Always active Always active - Manage options - Manage services - Manage {vendor\_count} vendors - [Read more about these purposes](https://cookiedatabase.org/tcf/purposes/) Accept Deny Manage options Save preferences Manage options - {title} - {title} - {title} Manage consent Manage consent ```json {"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/www.storagereview.com\/news\/nvidia-open-agent-safety-platform-openshell-sentry-bluefield-4","url":"https:\/\/www.storagereview.com\/news\/nvidia-open-agent-safety-platform-openshell-sentry-bluefield-4","name":"NVIDIA Open Agent Safety Platform: OpenShell and BlueField-4 Sentry","isPartOf":{"@id":"https:\/\/www.storagereview.com\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.storagereview.com\/news\/nvidia-open-agent-safety-platform-openshell-sentry-bluefield-4#primaryimage"},"image":{"@id":"https:\/\/www.storagereview.com\/news\/nvidia-open-agent-safety-platform-openshell-sentry-bluefield-4#primaryimage"},"thumbnailUrl":"https:\/\/www.storagereview.com\/wp-content\/uploads\/2026\/09\/StorageReview-nvidia-openshell.png","datePublished":"2026-09-28T15:13:48+00:00","description":"NVIDIA Open Agent Safety Platform pairs OpenShell on the CPU with a BlueField-4 Sentry that quarantines rogue agents in milliseconds.","breadcrumb":{"@id":"https:\/\/www.storagereview.com\/news\/nvidia-open-agent-safety-platform-openshell-sentry-bluefield-4#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.storagereview.com\/news\/nvidia-open-agent-safety-platform-openshell-sentry-bluefield-4"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.storagereview.com\/news\/nvidia-open-agent-safety-platform-openshell-sentry-bluefield-4#primaryimage","url":"https:\/\/www.storagereview.com\/wp-content\/uploads\/2026\/09\/StorageReview-nvidia-openshell.png","contentUrl":"https:\/\/www.storagereview.com\/wp-content\/uploads\/2026\/09\/StorageReview-nvidia-openshell.png","width":1500,"height":847,"caption":"NVIDIA Open Agent Safety Platform context: Jensen Huang on stage at GTC 2026 in front of the NemoClaw reference agent diagram, with the OpenShell sandbox runtime highlighted among the tools, memory, and model components"},{"@type":"BreadcrumbList","@id":"https:\/\/www.storagereview.com\/news\/nvidia-open-agent-safety-platform-openshell-sentry-bluefield-4#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.storagereview.com\/"},{"@type":"ListItem","position":2,"name":"News","item":"https:\/\/www.storagereview.com\/news"},{"@type":"ListItem","position":3,"name":"NVIDIA Open Agent Safety Platform: OpenShell on the CPU, Sentry on BlueField-4, and 100-Plus Partners From Anthropic to SpaceXAI"}]},{"@type":"WebSite","@id":"https:\/\/www.storagereview.com\/#website","url":"https:\/\/www.storagereview.com\/","name":"StorageReview.com","description":"StorageReview.com is a leading provider of news and reviews throughout the entire IT stack - from the datacenter to the edge, and all points in between.","publisher":{"@id":"https:\/\/www.storagereview.com\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.storagereview.com\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.storagereview.com\/#organization","name":"StorageReview.com","url":"https:\/\/www.storagereview.com\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.storagereview.com\/#\/schema\/logo\/image\/","url":"https:\/\/www.storagereview.com\/wp-content\/uploads\/2020\/02\/Storage-Reviews-2-2.png","contentUrl":"https:\/\/www.storagereview.com\/wp-content\/uploads\/2020\/02\/Storage-Reviews-2-2.png","width":344,"height":61,"caption":"StorageReview.com"},"image":{"@id":"https:\/\/www.storagereview.com\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/x.com\/storagereview","http:\/\/youtube.com\/user\/storagereview"]}]} ```