Back to library

Sandboxing

Category: Infrastructure

“SAND-boks-ing”

Running code or an AI in a walled-off space where it can work freely but cannot reach anything important if it goes wrong.

Lesson #9: Securing AI Agents: Cybersecurity Essentials →
Think of it like…

A welding booth. Sparks fly all they want inside, and the rest of the shop never catches fire.

Everyday example

Opening a suspicious attachment in a preview window that can't touch the rest of your computer.

Construction example

An agent tests a schedule change in a copy of the project plan before anything reaches the real crew calendar.

Business example

AI-written code runs in an isolated container with no network access until a person reviews it.

Why this matters

Sandboxes turn a potential disaster into a contained mess, which is what makes it safe to let agents act at all.

One-sentence summary

Sandboxing isolates risky work so failures can't spread.

Try it yourself

Identify one AI action in your business that currently runs straight against live data. Ask what a sandbox would look like.

Timer running · 0ssaved when you mark it complete
0 of 99 done · 0%
How did that feel? (optional)
every 6d
every 14d
every 32d

Hover or focus a choice to preview the new review date.

Exercises by category

  • Agents0/21 · 0%
  • Models0/10 · 0%
  • Data0/11 · 0%
  • Infrastructure0/22 · 0%
  • Fundamentals0/15 · 0%
  • NobleHub0/20 · 0%
0 XP · Level 1 Apprentice0 of 12 badges

Next badge: First Nail — 1 more exercise

Related terms

Picked automatically from the same category and the ideas this term shares.

Press R to jump here, a number key to open that card, and the arrow keys to move between them.

Least PrivilegeCategory: Infrastructure

Hand-picked pair

Giving a person or an AI exactly the access needed for the job and nothing more.

Indirect Prompt InjectionCategory: Agents

Hand-picked pair

An attack where hidden instructions are planted in a document, email, or web page so an AI reading it obeys the attacker instead of you.

Zero TrustCategory: Infrastructure

Same category: Infrastructure

A security approach where every request is verified every time, even from inside your own network or from your own AI.

Supply Chain AttackCategory: Infrastructure

Same category: Infrastructure

Getting into a company by compromising something it depends on — a vendor, a plugin, or a piece of borrowed code.

AI GovernanceCategory: Infrastructure

Same category: Infrastructure

The written rules for who may use AI at your organization, for what, and who is accountable when it goes wrong.

HookCategory: Infrastructure

Same category: Infrastructure

A spot in a program that is left open on purpose so extra code can run before, during, or after a step.