# As AI agents take control, Nvidia rethinks the security playbook > Source: > Published: 2026-11-12 22:46:33+00:00 ### As AI agents take control, Nvidia rethinks the security playbook Nvidia Corp. recently added a new pillar to its AI networking infrastructure with the [unveiling](https://developer.nvidia.com/blog/nvidia-bluefield-4-powers-new-scale-in-network-infrastructure-for-agentic-ai-factories/) of Scale-In. Scale-In brings purpose-built acceleration to secure, manage and operate agentic AI factories. It is designed to deliver secure access, high-performance data movement, tenant isolation, simpler operations and more predictable performance as agents assume increasingly larger roles within AI factories. “In agentic AI, it’s a completely different use case because now we’re dealing with many agents that need to run on the infrastructure,” said [Gilad Shainer](https://www.linkedin.com/in/giladshainer) (pictured), senior vice president of networking at Nvidia. “You need to increase security because you need to make sure that those agents are contained in their sandbox and are not doing the wrong things. You need to build an infrastructure that needs to ensure security all around…what happens in the memory, what happens on storage. This is why we needed to bring an infrastructure which actually enabled the security across everything. And that’s what Scale-In is.” Shainer spoke with theCUBE’s [Dave Vellante](https://www.linkedin.com/in/dvellante) for [theCUBE + NYSE Wired: AI Factories – Data Centers of the Future](https://www.thecube.net/events/nyse/ai-factories-data-centers-of-the-future) interview series on theCUBE, SiliconANGLE Media’s livestreaming studio. They discussed how Nvidia’s Scale-In architecture is designed to help transform scaled compute into a secure and operational AI factory platform. Since the August introduction, Nvidia has expanded its agent security strategy. In September, the company introduced its Open Agent Safety Platform, combining OpenShell with Nvidia Sentry for out-of-band monitoring and hardware-based security enforcement. An October announcement added the OpenShell Reference Architecture, integrating Vera Rubin infrastructure, Vera CPUs and BlueField-4 to support secure agent execution across enterprise systems. [Nvidia’s announcement](https://nvidianews.nvidia.com/news/openshell-reference-architecture) outlines the expanded architecture. ### In-silicon security for AI networking Scale-In is powered by Nvidia BlueField-4 and Nvidia DOCA and connected over Nvidia Spectrum-X Ethernet. [BlueField-4](https://resources.nvidia.com/en-us-accelerated-networking-resource-library/bluefield-4-dpu-datasheet) is Nvidia’s fourth-generation data processing unit, a [networking platform](https://siliconangle.com/2026/03/16/nvidia-introduces-bluefield-4-stx-reference-architecture-ai-storage-systems/) built for agentic AI factories and large-scale infrastructure needs. BlueField is essential to the management of agentic AI security, according to Shainer. “You can think about BlueField or Blue-Field-4 as a device that has in-silicon security engines that are working out of band and collecting telemetry from everything, from memory, from storage, from GPUs, from CPUs,” Shainer told theCUBE. “That’s why that infrastructure connects to all other infrastructures and ensures security all around. That out-of-band monitoring enables BlueField to actually understand exactly what agents are doing.” Along with BlueField-4, [Nvidia DOCA](https://developer.nvidia.com/networking/doca) also powers Scale-In deployment. This software platform enables the rapid creation of apps and services that offload, accelerate and isolate data center workloads. Using DOCA, developers can create software-defined, cloud-native, DPU- and SuperNIC-accelerated solutions. Like Nvidia CUDA, which provides a programming platform for GPU workloads, DOCA gives developers access to DPU acceleration capabilities. “DPU brings the in-silicon engines security engines, storage accelerations,” Shainer explained. “DOCA is the framework, the software, the APIs that enable you to access all of those engines that BlueField-4 provides.” Nvidia has further reinforced agentic AI security with its open-source runtime offering called [OpenShell](https://www.nvidia.com/en-us/ai/openshell/). The tool is designed to govern agent execution, access and inference routing. Nvidia combined OpenShell with BlueField-4 because it wanted a device that could collect information outside the GPU and monitor an environment that no agent could influence. “I want to also have another device which is completely separated, completely isolated from the agents, that can monitor everything out-of-band,” Shainer said. “That’s what we’re doing with BlueField-4, bringing all the security elements together with OpenShell, and now you have a secure infrastructure for agents. This is how the combination of OpenShell and BlueField-4 brings all the security elements that we need for gen AI.” The more recent OpenShell Reference Architecture builds on that approach with Nvidia Sentry, which runs on BlueField-4 using DOCA software. According to Nvidia, Sentry continuously monitors agent behavior and can quarantine agents that attempt to move outside their defined software boundaries. The combination extends OpenShell’s runtime controls with an independent enforcement layer. Here’s the complete video interview, part of SiliconANGLE’s and theCUBE’s coverage of [theCUBE + NYSE Wired: AI Factories – Data Centers of the Future](https://www.thecube.net/events/nyse/ai-factories-data-centers-of-the-future) interview series: ##### Photo: SiliconANGLE # A message from John Furrier, co-founder of SiliconANGLE: Support our mission to keep content open and free by engaging with theCUBE community. **Join theCUBE’s Alumni Trust Network**, where technology leaders connect, share intelligence and create opportunities. - **15M+ viewers of theCUBE videos** , powering conversations across AI, cloud, cybersecurity and more - **11.4k+ theCUBE alumni** — Connect with more than 11,400 tech and business leaders shaping the future through a unique trusted-based network ### Are you an AWS customer?  Support SiliconANGLE financially by buying your AWS services from our Marketplace portal page and links: [https://siliconangle.com/aws-marketplace/](https://siliconangle.com/aws-marketplace/) ##### **About SiliconANGLE Media** [SiliconANGLE](https://cts.businesswire.com/ct/CT?id=smartlink&url=https%3A%2F%2Fsiliconangle.com%2F&esheet=54119777&newsitemid=20240910506833&lan=en-US&anchor=SiliconANGLE&index=9&md5=646b1b564e2259100a2b8638aab0a552), [theCUBE Network](https://cts.businesswire.com/ct/CT?id=smartlink&url=https%3A%2F%2Fwww.thecube.net%2F&esheet=54119777&newsitemid=20240910506833&lan=en-US&anchor=theCUBE+Network&index=10&md5=7de2a85f95ab4a4a495cede20b8cb1da), [theCUBE Research](https://cts.businesswire.com/ct/CT?id=smartlink&url=https%3A%2F%2Fthecuberesearch.com%2F&esheet=54119777&newsitemid=20240910506833&lan=en-US&anchor=theCUBE+Research&index=11&md5=7bb33676722925eb57d588ec343e4f6f), [CUBE365](https://cts.businesswire.com/ct/CT?id=smartlink&url=https%3A%2F%2Fwww.cube365.net%2F&esheet=54119777&newsitemid=20240910506833&lan=en-US&anchor=CUBE365&index=12&md5=d310fb35919714e66ad8d42c9c0c1bc6), [theCUBE AI](https://cts.businesswire.com/ct/CT?id=smartlink&url=https%3A%2F%2Fwww.thecubeai.com%2F&esheet=54119777&newsitemid=20240910506833&lan=en-US&anchor=theCUBE+AI&index=13&md5=b8b98472f8071b23ebb10ab9a8dd0683)and theCUBE SuperStudios — with flagship locations in Silicon Valley and the New York Stock Exchange — SiliconANGLE Media operates at the intersection of media, technology and AI. Founded by tech visionaries John Furrier and Dave Vellante, SiliconANGLE Media has built a dynamic ecosystem of industry-leading digital media brands that reach 15+ million elite tech professionals. Our new proprietary theCUBE AI Video Cloud is breaking ground in audience interaction, leveraging theCUBEai.com neural network to help technology companies make data-driven decisions and stay at the forefront of industry conversations.