Daytona

exe.dev (Bold Software, Inc., Berkeley, CA) provides sandbox VMs, persistent VPSes and the Shelley coding agent as infrastructure for developers and AI coding agents; it was co-founded by Tailscale co-founder David Crawshaw and card.io co-founder Josh Bleecher Snyder.

$35M

Runloop, founded in 2023 in San Francisco, USA, is an infrastructure platform for AI coding agents.

Seed · $7M · 2025-08

Runtime control and sandbox infrastructure for AI agents

Seed · $20M · 2026-07 · Valuation $100M

Kontext Security, based in Munich, provides a runtime authorization and enforcement layer that sits between AI agents such as Claude Code and Codex and the tools, files and systems they access, evaluating every action in real time against policies based on agent identity, task, resource and action. Teams can start in observe mode and move to enforcement with an auditable record; customers are mainly financial and fintech firms and software teams.

Seed · $4M · 2026-09

AARM (Autonomous Action Runtime Management) is an open specification for securing AI agent actions at the point of execution: it intercepts agent-initiated actions and evaluates them against context, intent, policy and behavior before they run, with tamper-evident audit records. Authored by Herman Errico while at Vanta and first published on arXiv in February 2026, it was donated to the Cloud Security Alliance in April 2026 and now operates as a vendor-neutral CSAI Foundation technical working group.