Kata Containers 4.0 introduces a Rust-based runtime and stronger security capabilities, reinforcing its role as an open-source foundation for securely running AI agents across Kubernetes and enterprise infrastructure.
Kata Containers 4.0 has been released, reinforcing the open-source project’s role as a secure foundation for sandboxing AI agents. The headline feature is a new Rust-based runtime, now the project’s default implementation, bringing improved memory safety and performance to isolate AI workloads whose behaviour can be difficult to predict.
Managed by the OpenInfra Foundation, Kata Containers combines the speed of Linux containers with the isolation of lightweight virtual machines, ensuring a compromised AI agent cannot access another agent’s memory or move laterally across infrastructure. The project is already widely deployed across multi-tenant Kubernetes environments, secure CI/CD pipelines and AI infrastructure.
The release also expands hardware support and strengthens the software supply chain, while Kata Containers is now a supported runtime for Agent Sandbox under Kubernetes SIG Apps. It also remains the foundation for Confidential Containers, enabling confidential computing by protecting data in use so AI workloads can process sensitive information without exposing it to infrastructure operators.
Enterprise adoption continues to grow, with Ant Group using Kata Containers across offline compute workloads, core online services and AI agent infrastructure.
Fupan Li, Kata Containers architecture committee (AC) member and head of container technology, Ant Group, said, “Ant Group has long been a pioneer in deploying Kata Containers at scale. We first proved its value in co-locating our offline batch and compute workloads, where latency is less critical, to maximize resource efficiency and advance Ant Group’s green computing initiatives. To further bolster our security posture, we expanded Kata’s footprint to our core online services last year, enabling real-time security auditing and immediate mitigation of malicious access.
Today, Kata has naturally become the foundational secure sandbox for our AI Agents. With its outstanding isolation and ultra-fast startup performance, Kata is now an integral part of Ant Group’s Agentic Infrastructure. The architectural leap in Kata 4.0—especially the transition to the Rust runtime—directly addresses the stringent security and efficiency requirements of modern AI sandboxing. This release is a masterpiece of community collaboration, and we are proud to drive its adoption.”
