Islo deploys and runs autonomous coding agents in secure environments connected to your tools, so they can finish real engineering work.https://islo.dev/en-ushttps://islo.dev/blog/openai-could-have-stopped-hugging-face-attack/https://islo.dev/blog/openai-could-have-stopped-hugging-face-attack/How OpenAI's model escaped its evaluation sandbox through an allowlisted package proxy, and why host-level allow and deny is the wrong granularity for containing AI agents.Sun, 26 Jul 2026 00:00:00 GMThttps://islo.dev/blog/how-obert-built-a-software-factory-it-can-trust/https://islo.dev/blog/how-obert-built-a-software-factory-it-can-trust/How Obert uses Islo to turn well-scoped product work into trusted agent workflows and give a small AI-native team more engineering capacity.Thu, 23 Jul 2026 00:00:00 GMThttps://islo.dev/blog/how-we-stopped-working-for-our-agents/https://islo.dev/blog/how-we-stopped-working-for-our-agents/We automated implementation first and it backfired. Starting with review and verification instead, and wiring it all together with webhooks and label-driven triggers, gave us an autonomous engineering loop where a Linear label goes in and a merged PR comes out.Wed, 15 Jul 2026 00:00:00 GMThttps://islo.dev/blog/reward-hack-bench-sandbox-stops-agent-cheating/https://islo.dev/blog/reward-hack-bench-sandbox-stops-agent-cheating/Introducing RewardHackBench, an open-source benchmark for measuring whether sandbox policies prevent reward hacking in agent evaluations.Mon, 15 Jun 2026 00:00:00 GMThttps://islo.dev/blog/agent-sandbox-why-should-i-use-it/https://islo.dev/blog/agent-sandbox-why-should-i-use-it/A technical look at what Agent Sandbox solves inside Kubernetes, what it leaves to the platform team, and how to decide if it's the right primitive for your setup.Tue, 26 May 2026 00:00:00 GMThttps://islo.dev/blog/coding-agents-need-new-primitive/https://islo.dev/blog/coding-agents-need-new-primitive/Fast boot times are useful for request-shaped compute. Coding agents need something closer to a secure, persistent, workstation-shaped runtime.Sun, 17 May 2026 00:00:00 GMThttps://islo.dev/blog/four-layers-of-software-factories/https://islo.dev/blog/four-layers-of-software-factories/A framework for evaluating what you need to run AI coding agents at scale and where most teams get stuck.Mon, 30 Mar 2026 00:00:00 GMThttps://islo.dev/blog/islo-vs-claude-code-web/https://islo.dev/blog/islo-vs-claude-code-web/Claude Code for Web is great for quick coding help in the browser. Islo lets you run Claude Code alongside Cursor, orchestrate multiple agents, and connect to real services - all unattended.Mon, 23 Feb 2026 00:00:00 GMThttps://islo.dev/blog/islo-vs-cursor-web/https://islo.dev/blog/islo-vs-cursor-web/Cursor Cloud Agents is great for quick edits in the browser. Islo lets you run Cursor alongside Claude Code, orchestrate multiple agents, and connect to real services - all unattended.Mon, 23 Feb 2026 00:00:00 GMThttps://islo.dev/blog/how-we-accidentally-built-doubleagent/https://islo.dev/blog/how-we-accidentally-built-doubleagent/Stateful fake servers for GitHub, Slack, and Stripe that work with official SDKs - built for AI agent development.Tue, 17 Feb 2026 00:00:00 GMThttps://islo.dev/blog/why-islo-loves-monty/https://islo.dev/blog/why-islo-loves-monty/Monty sandboxes runtime-generated Python. Islo gives coding agents a zero-setup environment. Here's what Monty blocks, what can still crash, and how the layers fit.Tue, 10 Feb 2026 00:00:00 GMThttps://islo.dev/blog/competition-docker-daytona-e2b-sprites-coder/https://islo.dev/blog/competition-docker-daytona-e2b-sprites-coder/Here are five sandbox options that work with Claude Code (or with AI coding agents in general), and how they compare.Sun, 08 Feb 2026 00:00:00 GMThttps://islo.dev/blog/understanding-sandbox-security/https://islo.dev/blog/understanding-sandbox-security/Why sandboxing matters for AI agents - isolation, boundaries, and blast radius so you can run agents unattended without risking credentials or production.Sun, 08 Feb 2026 00:00:00 GMThttps://islo.dev/blog/how-secrets-can-be-stolen-clawdbot/https://islo.dev/blog/how-secrets-can-be-stolen-clawdbot/How I sent my own database credentials to a server I control using Clawdbot - and why prompt injection and full machine access make that possible in about 20 minutes.Sat, 07 Feb 2026 00:00:00 GMT