OpenShell

NVIDIA OpenShell is an open, secure runtime for agents. It governs agent execution, access, and where inference goes.

Security lives in the environment, not the model or the application. Nothing is permitted by default, permissions are granted based on policies, and enforcement happens outside the agent’s process, where it can’t be prompted away or bypassed. Every allow and deny is auditable.

Any model, any harness, any agent—across cloud, hybrid, on-prem, edge, and air-gapped infrastructure—under one policy layer.

Govern Your Agents

Run autonomous agents within boundaries you control, with consistent policy enforcement across models, harnesses, and deployment environments.

• Agent-Native Infrastructure: OpenShell separates how agents work from how they interact with their environment and the rest of the world. The agent’s behavior is monitored and every action is governed.
• Deployment Flexibility: Run open or closed models with your choice of agent and harness across cloud, hybrid, on-premises, and air-gapped infrastructure. Govern your agent fleet through one unified policy layer.
• Deterministic Governance: Deny access by default and grant permissions based on intent. OpenShell enforces policy outside the agent process, independently of the agent’s reasoning or cooperation.