Blogsby GlyphNov 6
Docker Sandboxes vs. Containers: Choosing the Right Isolation for AI Agents
A container shares the host kernel. Docker Sandboxes are microVMs with their own kernel and private Docker Engine. See how they differ and when to use each.
Docker Blog the company blog of Docker: latest posts and feed
Docker · Company blog · 11 a month · 27 posts since Aug 31, 2026
Nov 5
CNCF Score project improved its security posture by joining the Docker-Sponsored Open Source Program
See how CNCF Score improved container security with Docker Scout, Hardened Images, and the Docker-Sponsored Open Source Program.
Nov 5
Docker and ActiveState Extending Secure Defaults to the Packages Developers Install
Docker partners with ActiveState to continue to provide one standard for trusted content across everything you and your teams build on.
Nov 2
Where should your code live in a Docker Sandbox?
Docker Sandboxes support three ways to organize an agent’s code: shared mounts, Git worktrees, and clone mode. Here’s how to choose between them.
Nov 2
The Ecosystem is the Answer: Docker, the Blueprint Alliance, and the Importance of Collaboration in the Agentic Era
Docker is a founding member of the Blueprint Alliance, a 12-company reference architecture for securing AI agents, built around four governance questions.
Oct 29
Coding Agent Horror Stories: The CVE That Did Not Exist
An AI code review agent invented a CVE and recommended dangerous fixes. Learn how Docker Sandboxes contain agents and why their output needs verification.
Oct 28
Win the Agentic Era, Together: Introducing the Docker Navigator Partner Program
Docker is launching the Navigator Partner Program, with three tiers, co-selling benefits, and a new incentive for every registered AI governance deal.
Oct 23
PHP2Shell and eMudhra Patched
PHP2Shell and the eMudhra certificate compromise landed in the same week. Docker published a fixed PHP image within 24 hours and rebuilt the trust store across the catalog.
Oct 22
ActiveState Partners with Docker to Secure the Open Source in Enterprise Containers
Container security spans the image, build, and runtime. See the practical steps that shrink your attack surface and keep vulnerabilities out of production.
Oct 22
Security Update on PHP2Shell: Impact for Docker Customers
On Tuesday, October 20, 2026, Docker began tracking two critical vulnerabilities in PHP, CVE-2026-109618 and CVE-2026-109619, commonly known as PHP2Shell.
Oct 21
From baseline to Secure Software Factory: securing the systems that build your software
In July, Docker, Snyk and Keycard published Agent Baseline, an open, vendor-neutral reference architecture that defines security outcomes for running AI agents in the enterprise.
Oct 21
Your Agent Runs in a Docker Sandbox. Now It Can Join a Team
Run AI agents in Docker Sandboxes with BAND AI. Learn how to connect isolated agents, collaborate across environments, and manage access securely.
Oct 16
From Containers to Sandboxes: Developer Trust in the Agentic Era
The 2026 Stack Overflow Developer Survey shows only 7% of developers trust AI output for important decisions. Here’s what that means for running agents safely.
Oct 14
Harbor + Docker Sandboxes: Run Safe, Reproducible Agent Evals
Harbor can now run every eval task in Docker Sandboxes Docker Sandboxes are MicroVM environments to run agents like Claude Code, Codex, Cursor, and more safely With Sandboxes, define custom network policies for fair, reproducible evals Run...
Oct 14
AI Agent Security Risks: What Can Go Wrong When Agents Act on Their Own
Learn the top AI agent security risks, from prompt injection to excessive autonomy and credential exposure, and how to contain them.
Oct 12
Docker Hub security advisory: personal access tokens transferred during account-to-organization conversions
CVE-2026-105445: Docker Hub account conversion could re-assign personal access tokens to a new owner. Read what happened, who was affected, and the fix.
Oct 1
Trust Docker for the agents you don’t
At WeAreDevelopers, Docker introduced Cloud Sandboxes, the open Sandbox Kit specification, and a commitment to bring Kits to the CNCF for neutral governance.
Sep 24
Introducing Cloud Sandboxes: Start on Your Laptop, Finish in the Cloud
Run agents on your laptop, in the cloud, and move between them with one command, all safely. Earlier this year we launched Docker Sandboxes: microVM environments where coding agents can work autonomously in a safe way.
Sep 24
Docker and CNCF partner on an open spec for agent permissions
Docker is bringing the open source Sandbox Kit Spec to the CNCF, so AI agent permissions become a neutral, vendor independent standard built on OCI.
Sep 24
From Dockerfile to Kit: the Docker Sandboxes Kit Specification
Docker's Sandbox Kit Specification v3 packages an AI agent's network rules, credentials, and volumes as an ordinary, pinnable OCI image.
Sep 24
Manufacturing Trust for AI Agents | Docker’s WeAreDevelopers Keynote
Docker's WeAreDevelopers keynote shows how Sandboxes, Kits, and Cloud Sandboxes give AI agents strong isolation and reproducible authority.
Sep 22
Meet the Ecosystem: Partners and Customers at WeAreDevelopers with Docker
Meet the partners and customers bringing practical AI, security, and development sessions to the Docker Pavilion at WeAreDevelopers.
Sep 8
6 Benefits of Sandbox Environments (and How Docker Sandboxes Delivers Them)
Learn about the key benefits of sandbox environments with Docker including isolation, definable controls, secrets credential handling, and more.
Sep 3
YOLO Mode: Agent Autonomy Without the Guardrails
YOLO mode lets an AI agent run without asking permission. Learn what it is, why it's risky, and how to run it safely.
Sep 2
Below the Harness: Governing a Multi-Model, Multi-Harness World
We believe the future is a multi-model, multi-harness world. And we think it needs a new trust model. In 1988, Norm Hardy described a problem that had been quietly breaking systems for years: the confused deputy.
About this blog
Docker's own blog on docker.com, found by the daily check.
Posts per week, last 26 weeks
11 a month over the last six months (or since the feed's oldest post)
Posts by month
Writes about
AI and agents (12), Security (7), Infrastructure (3) in the last six months.
Docker
Docker on Companies (companies.fru.dev)Across Glyph:advisories·openperks·problems·Changefeed·socials·standards·startups
History
Listed on Blogs Sep 27, 2026. No changes to its feed, status or cadence since.