Teleport has unveiled Beams, a trusted runtime aimed at addressing security and IAM challenges that hinder the deployment of AI agents within production infrastructure.
Beams is engineered to operate each agent in a uniquely isolated Firecracker virtual machine that integrates identity management.
Each agent operates connected to infrastructure and inference services without relying on secrets, while maintaining audit and access control protocols.
Key Functionality
Beams targets a critical issue faced by engineers when developing agent-based workflows for infrastructure. The current process often involves complex integrations of IAM, infrastructure, and secret management, resulting in a lack of unified identity and visibility into agent operations. Traditionally, teams have had to create individualized container or VM solutions. Beams streamlines this process by providing quick-to-launch, isolated environments that are secure and connected to Teleport's identity and audit processes.
Each Beam operates within a Firecracker VM, ensuring complete file system and networking isolation. The Beams inherit delegated identities, allowing them to authenticate with registered services and inference endpoints without utilizing secrets. This setup also offers fine-grained control over networking for both external and internal services. Comprehensive auditing ensures teams gain full visibility into agents' actions and the resources they access.
Pre-requisite Security
Beams is designed to support various agentic applicationsAlexander Klizhentas, CTO of Teleport, emphasized, "The biggest blocker to agentic AI in the enterprise is friction introduced by security and IAM (identity and access management) requirements, which interfere with getting agents into production. With Beams, we're making security a prerequisite that's already solved, so engineers can innovate freely knowing every agent has the identity, access controls, and audit trail it needs."
Versatile Compatibility
Beams is designed to support various agentic applications. These range from internal agents requiring production service access to ephemeral agentic workflows enabling developers to work in staging environments without exposing secrets.
It also supports multi-agent production pipelines that demand robust, repeatable isolation measures.
Event and Demonstrations
The initial version of Beams is set to launch on April 30, 2026. Teleport plans to showcase Beams during two key events: RSAC at Booth S-3111 and KubeCon at Booth 840, both occurring in the week of March 23.
