Solo.io builds cloud-native network tooling for API management and service meshes. Its products include Gloo Gateway for Kubernetes-native API routing and security, Gloo Mesh for microservices lifecycle, telemetry, and observability using Istio and Cilium, and Spotlight Developer Platform for a secure, multi-cluster internal development environment with plugins and insights. They differentiate by offering an integrated suite that combines gateway, mesh, and developer tooling with strong Kubernetes alignment and partner networks for services and resellers. The goal is to help enterprises accelerate digital transformation by making cloud-native networking and API management easier to deploy, secure, and observe across multiple clusters.
Work here?Claim your company
Industries
Company Size
201-500
Company Stage
Series C
Total Funding
$171.5M
Headquarters
Cambridge, MA
Founded
2017
See people who can refer or advise you
Help us improve and share your feedback! Did you find this helpful?
Total Funding
$171.5M
Above
Industry Average
Funded Over
4 Rounds
Industry standards
KubeCon roundup day 2: nov. 10, 2026. Solo.io brings Agent Substrate to enterprise production. Solo.io has announced that its Agent Substrate and kagent tools are now generally available. Agent Substrate establishes a new infrastructure layer for agentic runtimes, combining serverless scale, sandbox isolation, and governed connectivity. kagent adds the developer experience for building and managing agents, tools, and skills. Agents are the next major workload for Kubernetes. To support them, the platform must evolve to handle the scale of individual agent sessions, each carrying its own state and context across multiple turns. At tens of millions of sessions, a dedicated pod for each one ties up resources while agents wait on models, tools, or human input. Agent Substrate introduces an execution model that suspends idle sessions and resumes them on demand, allowing enterprises to scale on the Kubernetes infrastructure they already operate. "Agent Substrate is trying to do for agentic workloads what Kubernetes did for traditional deployments - to make the orchestration of them a non-issue. This layer is necessary but it's not interesting for most agentic apps. Our goal is to make the problem go away, so people can focus on more interesting problems. Kubernetes itself is the perfect platform to build up from - it's everywhere and it's very well understood. When it comes to critical infrastructure, open always wins," said Tim Hockin, Distinguished Software Engineer Kubernetes and GKE, Google. Solo's enterprise distributions of Agent Substrate and kagent deliver a supported agent runtime with agentgateway as the actor's gateway, enforcing identity and policy controls on ingress and egress. As a co-maintainer of the Agent Substrate project with Google, Solo is leading the development of the open-source foundation for agentic workloads. The community's release of Agent Substrate 1.0 marks a significant milestone in agentic infrastructure, building on six months of momentum with more than 6,000 GitHub stars and over 100 contributors from more than 40 organizations. To help the community and customers plan their production rollouts, Solo has distilled its experience with performance and scale testing for GA into a calculator available on the kagent project site. The tool helps users size their environments and set service-level objectives for running Agent Substrate at scale. "The next generation of applications will be agents. The infrastructure they need is being defined right now, and the choices we make will shape how enterprises run for years to come. Agent Substrate and the actor model are the foundation for that shift. We're building for a world where agents carry out work across every part of an organization, with isolation and control built into the infrastructure from the start. Our customers are already showing what that future looks like in production," said Idit Levine, founder and CEO of Solo.io. Portworx unveils advanced AI and VM capabilities on Kubernetes. Portworx by Everpure unveiled new capabilities designed to address data challenges for running AI, virtual machines and containerized workloads running on Kubernetes. These updates include pre-staged volumes for AI/ML workloads, the general availability of Kube Datastore (KDS) for VMs on Kubernetes, and expanded observability through the operations center. More and more enterprises are looking to run agentic AI, VMs, and containerized workloads on a unified Kubernetes platform. The Portworx innovations benefit data infrastructure and platform engineering teams by eliminating data friction, enabling AI workloads to access training data sets faster, and offering a predictable path to modernize VMs on Kubernetes without compromising on performance. Alongside these product updates, Everpure has been named a Leader in the 2026 IDC MarketScape for Container Data and Infrastructure Management Software. According to the IDC MarketScape, "Everpure's Portworx offering is a good fit for enterprises running mission-critical VMs, containerized applications, or AI workloads on Kubernetes across multiple distributions or mixed storage that want integrated backup and Disaster Recovery. Everpure is actively developing virtualization platform feature parity into Portworx. Organizations interested in a seamless transition from VMs to containers should consider Portworx." Greg Muscarella, General Manager, Portworx at Everpure, said: "Enterprises need to build and scale new applications while modernizing existing ones without compromising availability or adding operational complexity. Portworx gives teams a consistent approach to running containers and VMs on Kubernetes and managing their data across public clouds and on-premises infrastructure. Our latest innovations, including Kube Datastore, help customers simplify storage management, recover faster from infrastructure failures, and use storage more efficiently. We believe our recognition as a Leader in the IDC MarketScape reflects our commitment to helping customers run mission-critical applications with confidence, from established enterprise workloads to new cloud-native services." Mirantis announces Agent Platform that strengthens human oversight of production AI agents. Mirantis today announced the general availability of Mirantis Agent Platform that gives organizations a self-hosted, governed environment for running AI agents in production on Kubernetes. Mirantis is pairing the Agent Platform with Forward Deployed Engineering (FDE), in which senior Mirantis engineers work directly with client teams to design, integrate, and operationalize custom agents. Announced at KubeCon + CloudNativeCon North America 2026, Mirantis Agent Platform helps platform engineering, site reliability engineering (SRE) and IT operations teams control agent access, enforce spending limits and track agent actions while maintaining human approval over operational fixes. "Enterprise AI adoption is losing momentum not because models lack intelligence, but because organizations lack governance and execution support," said Ronen Kofman, vice president of product management at Mirantis. "By combining sandboxed execution and real-time human oversight in the Mirantis Agent Platform with Mirantis Forward Deployed Engineering, we're providing the guardrails that organizations need to run AI agents safely in production." Among the key capabilities of the Agent Platform are: * Policy-based governance and sandboxed isolation - Define what each agent can access and run each one in an isolated sandbox to limit unauthorized or unintended activity. * Configurable spend caps - Set spending limits at the organization, project and agent levels to control financial exposure. * Full audit trails - Record every agent action to support operational reviews, incident investigations and compliance. * One-click cut network access - Cut off network access for all agents at once when administrators need to intervene. * Human-approved remediation - Require a person to approve proposed fixes before agents apply them. Mirantis Agent Platform supports Mirantis's built-in Prism agent and third-party agents customers already use. For infrastructure operations, it proactively detects production issues, diagnoses root causes and proposes fixes. Once a person approves a proposed fix, the agent applies it, helping teams move from investigation to remediation while retaining control over changes. Mirantis Agent Platform is generally available. Attendees can visit Mirantis at Booth 232 during KubeCon + CloudNativeCon North America, November 9-12 in Salt Lake City, or schedule a one-to-one demo.
Solo.io has made enterprise releases of Agent Substrate and kagent generally available. Agent Substrate is a new infrastructure layer for running AI agents, combining serverless scale, sandbox isolation, and governed connectivity. kagent handles building and managing agents, tools, and skills. Instead of keeping a dedicated pod for every agent session, Agent Substrate suspends idle sessions and resumes them on demand. Enterprises can scale on the Kubernetes infrastructure they already run. OutSystems and Swissquote are launch customers running it in production. Swissquote uses kagent for financial-crime investigation agents. Solo co-maintains the open-source Agent Substrate project with Google. Version 1.0 has more than 6,000 GitHub stars and over 100 contributors from more than 40 organisations.
iProov brings liveness proof to AI agent authorization with HAPS implementation. Oct 23, 2026, 11:30 am EDT Chris Burt Enterprises deploying AI agents are struggling to maintain trust and oversight of them, even in some high-risk scenarios. To help them regain human control, iProov has launched a biometric human authorization service based on the Human Approval and Presence Specification (HAPS). The company unveiled the open-source HAPS protocol in September to connect proof of humanity with auditable proof of authorization for a specific action. Proof of humanity is supplied by iProov's Dynamic and Express biometric liveness detection technologies. iProov's new HAPS implementation integrates with the agentgateway developed by solo.io and the authorization management platform Cerbos. Cerbos reviews actions and calls the HAPS service for approval when cryptographically verifiable proof of approval for a particular action is required. "Our partnership with iProov introduces a new level of control, enabling organizations to require approval from the right human before a high-consequence action can proceed," says Cerbos CPO and Co-founder Alex Olivier. "By adding this decision capability, we are giving organizations the confidence to delegate an even greater range of tasks to their AI agents than ever before while still retaining human oversight and accountability." The need for tighter control over what AI agents do has been neatly demonstrated in a series of security incidents that Amantrue CEO Evin McMullen calls "Black October" in this week's episode of the Biometric Update Podcast. As a result, digital identity and cybersecurity companies are racing to bring software to an increasingly crowded market to bridge the gap between identity and agentic authorization, which usually means utilizing biometrics. "Together, we enable organizations to embrace AI agent automation without compromising human control," says iProov CEO and Founder Andrew Bud. "By requiring a genuine human face as part of the approval process, we secure the process against agent impersonation. Because no matter how smart they become, agents will never have faces." Article topics. Latest biometrics news. Oct 24, 2026, 12:03 pm EDT Biometrics is emerging as a pillar of governance for AI agents. In a moment where agents are going rogue and... Oct 23, 2026, 3:53 pm EDT A question period for companies interested in delivering Bermuda's national digital identity system closes today, as the island nation explores... Oct 23, 2026, 2:17 pm EDT It might be a mantra for the contemporary identity sector: "The idea is continuous checks." So says Spokeo COO Harrison... Oct 23, 2026, 1:55 pm EDT The UK Home Office has published its data protection impact assessment (DPIA) for live facial recognition technology, including software, hardware... Oct 23, 2026, 1:37 pm EDT Data breaches are mounting as AI enables new identity fraud techniques. In South Korea, a "Connecting Information" (CI) identifier functions... Oct 23, 2026, 12:48 pm EDT Mobile driver's licenses are coming to Europe in 2028, according to the EU's plan for European Digital Identity (EUDI) Wallets...
Solo.io, a cloud native connectivity provider, has launched agentshield, an open source project that protects an organization's existing data, APIs, and services from AI agents it does not control. The company announced it on October 23, 2026. Most agent security focuses on agents a company runs itself. Agentshield covers the rest: attacker agents, misbehaving external agents, and in-house agents that escape their guardrails. The tool instruments existing infrastructure without changing services, maps lateral movement in a single attack-path graph, and generates rules as the graph changes. It also issues findings with remediation steps that a human or an agent can apply. Solo.io cites CrowdStrike data that adversaries move from foothold to lateral movement in an average of 29 minutes.
Solo.io announced an agent defense tool. Nothing on its own pages says when. agentshield is real, pre-1.0, and undated on every Solo.io surface; the two items with dates on the conference page are September extensions. The boundary layer and the defense layer now share one vendor family while the spec underneath stays a draft. Heath Callahan Forkast mind | 2026-10-23 12:53 AM PDT The announcement that introduces agentshield carries no date. Neither does its own project page. The nearest thing to a date on either surface is the event schema on Solo.io's key announcements page, which dates the gathering to September 17 through 18 in Amsterdam while the page body covers the Oct. 22 San Jose program. On Solo.io's press room, where the newest release is dated September 10, the only October 22 item anywhere is the calendar card for AGNTCon North America. Read against the vendor's own pages, launched at Day 1 is what is positioned. What the record shows is one undated new project and two September extensions. The announcements page carries a card titled "Introducing agentshield": "Agentshield is a new open source project that protects your APIs, services, data, and workloads from AI agents you don't control by mapping attack paths, detecting threats, and helping remediate them at machine speed." The two items beside it have dated primaries from early September. The September 3 press release covers agentdesktop, an open source desktop governance layer. The September 10 press release covers the standalone mode of Solo Enterprise for agentgateway, "a single self-contained binary or container that runs in any environment, from a virtual machine or ECS task to bare metal or a developer workstation," with a self-service UI and governance that treats Model Context Protocol servers as first-class backends. That is the newest agentgateway item on the record: an extension that carries the gateway beyond Kubernetes, not a launch of it. The claim that Solo.io shipped a Kubernetes-native AgentGateway at Day 1 gets both the date and the direction wrong. agentshield itself is real software with a specific shape. In the vendor's terms it maps workloads, identities, policies and exposures into one evidence-carrying graph, detects change against the last coherent state, and sends new paths to an investigator model with bounded read-only tools. Fixes are proposed and applied only after explicit human approval, in the sequence plan, dry run, approve, apply, verify. The project's own page states "nothing is written before the approval step." Plugins ship for Kubernetes, Istio and Cilium; agentgateway, Falco and AWS are marked early, and Tetragon is planned. It is open source under the Apache 2.0 license. No design partners or customers are named on any fetched surface. It is also pre-1.0, and the project page says in three words what that means: "Evaluate it; do not expose it." The HTTP API and the user interface carry no authentication, and approval state lives in process memory. A defense tool that arrives without its own doors is a fact a buyer can check before any of the positioning. The coupling is visible in that plugin list. The boundary layer and the defense layer are one vendor family, and agentshield's own agentgateway plugin is the seam between them: Gateway API semantics, discovery only, no telemetry transport yet. The specification that would make a mesh portable is still a draft. This desk's announced-but-not-shipped ledger entering the show priced that gap: Personal Agent Protocol at v0.1, Okta's agent framework pre-general-availability, and the finding that builders cannot buy interoperability, only individual bridges. The week of Oct. 20 shipped the same pattern at three layers: enforcement descending into silicon, a healthcare-native gatekeeper, and now a mesh and a defense tool in one catalog. When the shared spec is a draft, every bridge carries its own agent identity scheme, which is the same gap this desk mapped as the origin-check gap: both theories verify the claimer, neither verifies the requester. For teams weighing the release, the checkable facts are narrow and all of them are on the pages. The Apache 2.0 license. The plugin list. The maturity warning. The absence of a date. The gateway-side figures of over 50 million image downloads and 500 contributors are vendor-reported. What ships is a pre-1.0 tool that tells you not to expose it, plus two September extensions. What is positioned is a launch day.
Find jobs on Simplify and start your career today
Don't see your dream role? Check out thousands of other roles on Simplify.Browse all jobs
Industries
Company Size
201-500
Company Stage
Series C
Total Funding
$171.5M
Headquarters
Cambridge, MA
Founded
2017
Find jobs on Simplify and start your career today
Don't see your dream role? Check out thousands of other roles on Simplify.Browse all jobs