Strands Box (Product): news timeline & CVEs

AWS takes aim at runaway AI agent behavior with Strands Box

AWS released Strands Box, an open-source macOS sandbox that enforces behavioral policies on AI agents.

Amazon Web Services released Strands Box, an Apache 2.0 sandbox, in developer preview on October 7 to limit autonomous AI agent actions. It pairs operating-system isolation with Dogwood, an AWS policy language, and checks activity routed through its shell, Python interpreter, and MCP broker. A network gateway can approve outbound requests and attach credentials without showing secrets to the agent. It currently runs only on Apple silicon Macs with macOS 15 or later; ports to Amazon Bedrock AgentCore, ECS, and Kubernetes have no published timeline.

CSO Onlineupdated Oct 8, 20:39 UTC · 3h agofirst Oct 8, 10:17 UTC · 14h agoAI safety & security 5 sources1

AWS launches open-source AI agent sandbox to prevent YOLO mode disasters

AWS open-sourced Strands Box, a sandbox that enforces deterministic policies on autonomous AI agents.

Amazon Web Services released Strands Box, an open-source sandbox meant to stop AI agents from acting without enforceable limits. It combines OS-level isolation with the Dogwood policy engine, which checks shell, Python, API, and tool calls against earlier activity. Rules are enforced outside the agent, so it cannot talk its way around them. The project is on GitHub for macOS; Linux support is in development and a Windows client is planned.

The Register · Securityupdated Oct 8, 20:39 UTC · 3h agofirst Oct 7, 17:42 UTC · 1d agoAI tools & infra 5 sources1

Strands Box

Timeline2 articles

Appears with

AWS takes aim at runaway AI agent behavior with Strands Box

AWS launches open-source AI agent sandbox to prevent YOLO mode disasters