Teleport makes Beams generally available to bring AI agents into production

Teleport made Teleport Beams, its runtime for AI agents operating on production infrastructure, generally available following a public beta, with each agent receiving its own ephemeral micro-VM carrying a delegated identity and no standing privileges. Teleport co-founder and CEO Ev Kontsevoy said traditional sandboxes fall short "when the cost of an error is high," and Beams addresses that with execution plans reviewed by a person or an LLM judge, full tracing of model traffic, session scoring against the MITRE ATT&CK framework with seven prebuilt detection rules, and a kill switch that cuts an agent's production connections. Beams runs on the Teleport Infrastructure Identity Platform, which Teleport says is in production at more than 700 enterprises including Nasdaq Inc., DoorDash Inc. and Elastic N.V.; Cisco Systems Inc. became Teleport's largest strategic investor in August.

Teleport makes Beams generally available to bring AI agents into production Infrastructure identity company Teleport https://goteleport.com/ today made Teleport Beams, its runtime for artificial intelligence agents that work on production infrastructure, generally available. Beams goes after what Teleport sees as the main reason agents have stayed out of production so far. Most enterprises have not plugged agents into those systems at all, according to Ev Kontsevoy, Teleport’s co-founder and chief executive. He blamed gaps such as delegated identity and an audit trail that follows an agent from intent to action. Sandboxes, the tool many teams reach for now, mostly isolate the agent in a virtual machine and handle its credentials. “When the cost of an error is high, traditional sandboxes don’t cut it,” Kontsevoy said ahead of the announcement. Teleport calls each individual runtime a Beam, and every agent gets its own. A Beam carries a delegated identity inherited from the user or agent that launched it, while the agent inside starts with no standing privileges. Work begins with a proposed execution plan. That plan can be revised by a person or by a large language model acting as judge before a separate Beam runs it with only the approved roles. Reviewers then see new requests only for steps outside the plan. Passwords never enter the agent’s environment. Everything the agent sends to a model is traced, and Teleport says that record lets Beams pick out a hijacked goal or agents coordinating in ways nobody planned. Each session also gets scored against the MITRE ATT&CK framework for a written risk summary. Seven of the detection rules come prebuilt, privilege escalation among them. Anything else a customer wants caught can be described in natural language and added to the set. Each Beam is an ephemeral micro-VM on a virtualized network. Nothing gets in or out without passing Teleport’s controls, and the audit log keeps a copy of every protocol exchange. Snapshots taken by a feature named Phases carry the files and memory of an expiring Beam into the next one, so longer jobs do not have to start over. Teams can also fork a Beam to try several approaches in parallel. When something goes badly wrong, a kill switch ends the agent’s activity and cuts all of its connections to production at once. Teleport makes no promise about what a model will decide. A hijacked or mistaken agent inside a Beam can reach only what it was granted until its authority lapses at the end of the task, and every action it takes stays on the record. Beams runs on top of the Teleport Infrastructure Identity Platform, which the company says is in production at more than 700 enterprises, Nasdaq Inc., DoorDash Inc. and Elastic N.V. among them. Cisco Systems Inc. became Teleport’s largest strategic investor in August https://siliconangle.com/2026/10/26/ciscos-privileged-infrastructure-access-ties-admin-and-ai-agent-privileges-to-the-task/ . Teleport first showed Beams in March https://goteleport.com/about/newsroom/press-releases/teleport-launches-beams-trusted-agent-runtimes-for-infrastructure/ , two months after publishing the Teleport Agentic Identity Framework https://siliconangle.com/2026/01/27/teleport-launches-agentic-identity-framework-secure-ai-agents-production/ that the runtime now puts into practice. Following a public beta, the product is available at beams.run https://www.beams.run/ . Image: Teleport A message from John Furrier, co-founder of SiliconANGLE: Support our mission to keep content open and free by engaging with theCUBE community. Join theCUBE’s Alumni Trust Network , where technology leaders connect, share intelligence and create opportunities. - 15M+ viewers of theCUBE videos , powering conversations across AI, cloud, cybersecurity and more - 11.4k+ theCUBE alumni — Connect with more than 11,400 tech and business leaders shaping the future through a unique trusted-based network Are you an AWS customer? Support SiliconANGLE financially by buying your AWS services from our Marketplace portal page and links: https://siliconangle.com/aws-marketplace/ https://siliconangle.com/aws-marketplace/ About SiliconANGLE Media SiliconANGLE https://cts.businesswire.com/ct/CT?id=smartlink&url=https%3A%2F%2Fsiliconangle.com%2F&esheet=54119777&newsitemid=20240910506833&lan=en-US&anchor=SiliconANGLE&index=9&md5=646b1b564e2259100a2b8638aab0a552 , theCUBE Network https://cts.businesswire.com/ct/CT?id=smartlink&url=https%3A%2F%2Fwww.thecube.net%2F&esheet=54119777&newsitemid=20240910506833&lan=en-US&anchor=theCUBE+Network&index=10&md5=7de2a85f95ab4a4a495cede20b8cb1da , theCUBE Research https://cts.businesswire.com/ct/CT?id=smartlink&url=https%3A%2F%2Fthecuberesearch.com%2F&esheet=54119777&newsitemid=20240910506833&lan=en-US&anchor=theCUBE+Research&index=11&md5=7bb33676722925eb57d588ec343e4f6f , CUBE365 https://cts.businesswire.com/ct/CT?id=smartlink&url=https%3A%2F%2Fwww.cube365.net%2F&esheet=54119777&newsitemid=20240910506833&lan=en-US&anchor=CUBE365&index=12&md5=d310fb35919714e66ad8d42c9c0c1bc6 , theCUBE AI https://cts.businesswire.com/ct/CT?id=smartlink&url=https%3A%2F%2Fwww.thecubeai.com%2F&esheet=54119777&newsitemid=20240910506833&lan=en-US&anchor=theCUBE+AI&index=13&md5=b8b98472f8071b23ebb10ab9a8dd0683 and theCUBE SuperStudios — with flagship locations in Silicon Valley and the New York Stock Exchange — SiliconANGLE Media operates at the intersection of media, technology and AI. Founded by tech visionaries John Furrier and Dave Vellante, SiliconANGLE Media has built a dynamic ecosystem of industry-leading digital media brands that reach 15+ million elite tech professionals. Our new proprietary theCUBE AI Video Cloud is breaking ground in audience interaction, leveraging theCUBEai.com neural network to help technology companies make data-driven decisions and stay at the forefront of industry conversations.