Hazmat, Snyk Code, and Cloudways ship for AI agents

Today’s briefing covers three launches that change the layer around AI agents: safer local execution, broader code scanning, and managed deployment.

Hazmat is an open-source tool that runs coding agents such as Claude Code, Codex, OpenCode, and Cursor Agent under a separate account on your own machine. It previews a session contract, scopes filesystem access, adds network controls, and supports snapshots and restore. 12

The practical value is blast-radius reduction: an agent can work on a repository without automatically inheriting your home directory, SSH keys, or cloud credentials. The boundary is not complete isolation. Hazmat’s own documentation says macOS dedicated-user containment is the default supported path, while native Linux launch is not ready and HTTPS exfiltration is not fully solved. 2

Snyk’s official August update becomes available today. It adds Python coverage for LangChain applications and AWS Lambda, new weak-hash and debug-feature detections, deeper Java Spring Data tracking, and recognition for several Java frameworks. Snyk also says it reduced false positives for C++ DoubleFree and C# Code Injection. 3

One workflow change matters for CI: fix examples no longer appear in the Snyk Web UI’s Fix analysis or in SARIF output. The update points remediation to Snyk Agent Fix, which generates a fix for a finding and verifies it by rescanning. Teams should test any downstream parser that expects those examples. 3

Cloudways, part of DigitalOcean, launched Managed AI Agents with general availability for OpenClaw and Hermes. The service removes the need to provision a VPS, configure containers, or manage the agent runtime yourself. The announcement says deployments run in isolated environments, runtime updates are validated before rollout, and one-click Cloudways MCP integration lets an agent act on the customer’s existing servers and applications. 45

That matters for teams that want an open-source agent without owning its deployment plumbing. The tradeoff is control: the launch materials do not disclose pricing or independent performance results, so treat this as a hosting shortcut rather than a new model, and review its MCP permissions before connecting production systems. 4

The thread across all three is operational. Hazmat limits what an agent can touch, Snyk checks what the code does, and Cloudways packages the infrastructure underneath it.