[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fLuuWqShRSYGFwfnJebggvafoT7uA2yc-En25AweccJI":3},{"article":4,"iocs":50,"watch_terms":51,"solutions":52,"lesson":137},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":32,"category":33,"article_tags":37},"71f32003-dddd-4058-a636-16a6b9cac038","Self-hosted Claude Managed Agents keeps agent credentials in your environment","self-hosted-claude-managed-agents-keeps-agent-credentials-in-your-environment-a53dac","Anthropic has released a self-hosted version of Claude Managed Agents. Companies can run the agent harness, sandboxes, credentials, and session history in their cloud or on-premise. The option opened as a private beta on November 12, and customers request access through their Anthropic account team. The change matters for agents that already work unattended inside corporate systems, fixing broken builds, testing releases, triaging alerts, and working through bug backlogs. Until now, customers could host the … More → The post Self-hosted Claude Managed Agents keeps agent credentials in your environment appeared first on Help Net Security.","Anthropic has launched a self-hosted version of Claude Managed Agents in private beta, allowing companies to run agent harnesses, sandboxes, credentials, and session history on-premise or in their own cloud environments. This new option enables customers to manage sensitive credentials within their own secrets managers, enhancing control over unattended agents. The system is built around four security principles, including separating the harness from the sandbox and using allowlists for hosts, with logs exportable via OpenTelemetry for monitoring.","Anthropic releases self-hosted Claude Managed Agents for private beta.","https:\u002F\u002Fwww.helpnetsecurity.com\u002F2026\u002F11\u002F12\u002Fanthropic-self-hosted-claude-managed-agents\u002F","https:\u002F\u002Fimg.helpnetsecurity.com\u002Fwp-content\u002Fuploads\u002F2026\u002F05\u002F27125835\u002Fclaude-vortex.webp","2026-11-12T18:07:00+00:00","2026-11-12T19:00:12.998864+00:00",7,[17,20,23,26,28,30],{"name":18,"type":19},"Anthropic","vendor",{"name":21,"type":22},"Claude Managed Agents","product",{"name":24,"type":25},"PostgreSQL","technology",{"name":27,"type":19},"Amazon",{"name":29,"type":22},"Bedrock",{"name":31,"type":19},"Google","02371804-cf6d-4449-98de-f1a2d4d9b266",{"id":32,"icon":34,"name":35,"slug":36},null,"Tools","tools",[38,40,45],{"category":39},{"id":32,"icon":34,"name":35,"slug":36},{"category":41},{"id":42,"icon":34,"name":43,"slug":44},"839da5c1-3c34-47e2-9499-f7201640e3ac","AI Security","ai-security",{"category":46},{"id":47,"icon":34,"name":48,"slug":49},"c70f3a41-2f0c-4608-870d-b8cbcd8be076","Cloud Security","cloud-security",[],[31,18,27],{"controls":53,"vendors":136},[54,82,108],{"slug":55,"name":56,"problem":57,"products":58},"privileged-access-management","Privileged access management (PAM)","Admin accounts stop being one stolen password away from control of everything.",[59,66,74],{"vendor_slug":60,"vendor_name":61,"vendor_logo":62,"product_slug":55,"product_name":63,"url":64,"description":65},"threatlocker","ThreatLocker","\u002Fvendor-logos\u002Fthreatlocker.png","Privileged Access Management","https:\u002F\u002Fwww.threatlocker.com\u002Fcapabilities\u002Fprivileged-access-management","Gives elevated rights to specific applications only where needed, so users do not need local admin accounts.",{"vendor_slug":67,"vendor_name":68,"vendor_logo":69,"product_slug":70,"product_name":71,"url":72,"description":73},"palo-alto-networks","Palo Alto Networks","\u002Fvendor-logos\u002Fpalo-alto-networks.png","idira-privileged-access-management","Idira Privileged Access Management","https:\u002F\u002Fwww.paloaltonetworks.com\u002Fidira\u002Fhuman\u002Fprivileged-access-management","Privileged access management from the former CyberArk portfolio: vaulting, rotation, just-in-time access and session monitoring.",{"vendor_slug":75,"vendor_name":76,"vendor_logo":77,"product_slug":78,"product_name":79,"url":80,"description":81},"beyondtrust","BeyondTrust","\u002Fvendor-logos\u002Fbeyondtrust.png","password-safe","BeyondTrust Password Safe","https:\u002F\u002Fwww.beyondtrust.com\u002Fproducts\u002Fpassword-safe","Privileged password and session management.",{"slug":83,"name":84,"problem":85,"products":86},"secrets-management","Secrets management","API keys, tokens and passwords stop leaking from code, chat and configuration files.",[87,95,103],{"vendor_slug":88,"vendor_name":89,"vendor_logo":90,"product_slug":91,"product_name":92,"url":93,"description":94},"github","GitHub","\u002Fvendor-logos\u002Fgithub.png","advanced-security","GitHub Advanced Security","https:\u002F\u002Fgithub.com\u002Fsecurity\u002Fadvanced-security","Dependency review, code scanning and secret scanning with push protection.",{"vendor_slug":96,"vendor_name":97,"vendor_logo":98,"product_slug":99,"product_name":100,"url":101,"description":102},"gitguardian","GitGuardian","\u002Fvendor-logos\u002Fgitguardian.png","gitguardian-platform","GitGuardian Secrets Detection","https:\u002F\u002Fwww.gitguardian.com\u002F","Finds and helps remediate secrets leaked in repositories, CI pipelines and chat tools.",{"vendor_slug":67,"vendor_name":68,"vendor_logo":69,"product_slug":104,"product_name":105,"url":106,"description":107},"idira-secrets-management","Idira Secrets Management","https:\u002F\u002Fwww.paloaltonetworks.com\u002Fidira\u002Fmachine\u002Fsecrets-management","Secrets management for applications, scripts and pipelines, from the former CyberArk portfolio.",{"slug":109,"name":110,"problem":111,"products":112},"security-monitoring-siem","Security monitoring (SIEM)","Logs from everywhere end up in one place, with alerts that someone actually sees.",[113,121,128],{"vendor_slug":114,"vendor_name":115,"vendor_logo":116,"product_slug":117,"product_name":118,"url":119,"description":120},"abstract-security","Abstract Security","\u002Fvendor-logos\u002Fabstract-security.png","abstract-composable-siem","Abstract Composable SIEM","https:\u002F\u002Fwww.abstract.security\u002Fplatform","SIEM built from separate parts for collection, AI-assisted detection and tiered retention, which can be adopted one at a time.",{"vendor_slug":122,"vendor_name":31,"vendor_logo":123,"product_slug":124,"product_name":125,"url":126,"description":127},"google","\u002Fvendor-logos\u002Fgoogle.png","google-security-operations","Google Security Operations","https:\u002F\u002Fcloud.google.com\u002Fsecurity\u002Fproducts\u002Fsecurity-operations","Cloud SIEM and SOAR, formerly Chronicle.",{"vendor_slug":129,"vendor_name":130,"vendor_logo":131,"product_slug":132,"product_name":133,"url":134,"description":135},"splunk","Splunk","\u002Fvendor-logos\u002Fsplunk.png","enterprise-security","Splunk Enterprise Security","https:\u002F\u002Fwww.splunk.com\u002Fen_us\u002Fproducts\u002Fenterprise-security.html","SIEM for detection, investigation and response, on premises or in the cloud.",[],{"slug":138,"title":139,"body":140,"framework_refs":141,"framework_notes":147},"self-hosted-ai-agents-demand-rigorous-credential-and-configuration-controls","Self-Hosted AI Agents Demand Rigorous Credential and Configuration Controls","Anthropic's self-hosted Claude Managed Agents offering highlights a critical shift in responsibility: when agent harnesses, sandboxes, and credentials move into a customer's own environment, that customer now owns the security of those assets. If credentials stored in internal secrets managers are misconfigured, over-permissioned, or inadequately audited, unattended agents can become a high-value attack vector with little human oversight. The architecture's emphasis on separating harnesses from sandboxes and using host allowlists reflects sound design principles, but those controls only work if operators implement and maintain them correctly. This matters because agentic AI systems often act autonomously over extended periods, meaning a compromised credential can cause significant damage before anyone notices.",[142,143,144,145,146],"NIST SP 800-53 IA-2: Identification and Authentication (Organizational Users)","NIST SP 800-53 SC-12: Cryptographic Key Establishment and Management","CIS Control 5: Account Management","NIST CSF 2.0 PR.AA-05: Access permissions, entitlements, and authorizations","NIS2 Article 21(2)(i)",{"NIS2 Article 21(2)(i)":148,"CIS Control 5: Account Management":149,"NIST SP 800-53 SC-12: Cryptographic Key Establishment and Management":150,"NIST CSF 2.0 PR.AA-05: Access permissions, entitlements, and authorizations":151,"NIST SP 800-53 IA-2: Identification and Authentication (Organizational Users)":152},"This point covers access control and asset management, requiring organisations to properly govern non-human identities such as agent credentials that operate within their own infrastructure.","Unattended agent credentials are privileged non-human accounts that must be inventoried, least-privilege scoped, and regularly reviewed under a formal account management process.","Credentials and secrets stored in customer-managed secrets managers must follow established key management practices to ensure they are generated, stored, and rotated securely.","This category requires that permissions for automated agents be granted at minimum-necessary levels and regularly reviewed, directly addressing the risk of over-permissioned agent credentials.","Agent credentials are non-human identities that still require strong identification and authentication controls, which this control mandates for all system access including automated processes."]