Writing
- How to stop an AI agent with web access from leaking data: egress allowlists, DNS, proxies and logsLock down what an AI agent can reach online. Egress allowlists, DNS filtering, forward proxies, sandbox network controls and request logging, with configs.2026-10-08
- How to sandbox Claude Code, Codex, Copilot and Cursor on your own machine: 9 options comparedBuilt-in agent sandboxes, Microsoft Execution Containers, OpenShell, Docker Sandboxes, dev containers and VMs compared, with setup steps and decision rules.2026-10-08
- Where should your agent run code? 15 hosted sandboxes compared on price, network controls and SDK supportHourly list prices for the same sandbox differ about 5x, idle-shutdown settings can matter more than the rate, and most products let your agent reach the whole internet by default. We compare 15 products on price, network controls, isolation and framework support, and end with rules for picking one.2026-10-02