Teleport Launches Beams — Trusted Firecracker VM Runtimes for AI Agents with Built-in Identity and Zero-Secret Infrastructure Access

On March 19, 2026, Teleport, the AI Infrastructure Identity Company, announced Beams — a trusted runtime designed to solve the security and IAM challenges blocking teams from designing and running AI agents in production infrastructure.

WHAT BEAMS DOES:

Each Beam runs an AI agent in an isolated Firecracker microVM with built-in cryptographic identity. Key capabilities:

1. ISOLATION: Full file system and networking isolation per agent via Firecracker VMs
2. IDENTITY: Each Beam inherits delegated identity — no secrets or shared credentials needed
3. ACCESS CONTROL: Policy-controlled, tracked, and auditable access to data sources, infrastructure, and inference services
4. FINE-GRAINED NETWORKING: Control over both external and internal service access
5. AUDIT: Every agent action is logged, giving teams full visibility into what agents access and when

THE PROBLEM BEAMS SOLVES:

CTO Alexander Klizhentas explained: Security and IAM requirements interfere with getting AI agents into production. With Beams, security is a prerequisite thats already solved, so engineers can innovate freely knowing every agent has the identity, access controls, and audit trail it needs.

Currently, launching agents in production means stitching together IAM, infrastructure, and secrets by hand — with no consistent identity, no visibility into agent actions, and every team building its own container or VM workflows from scratch.

USE CASES:

• Internal agents needing access to production services
• Ephemeral agentic workflows where developers build against staging without exposing secrets
• Multi-agent production pipelines requiring hardened, reproducible isolation

TIMELINE AND AVAILABILITY:

Beams MVP launches April 30, 2026. Early access registration is open at beams.run. Teleport will demonstrate Beams at RSAC (Booth S-3111) and KubeCon (Booth 840) during the week of March 23.