---
title: "Palana (Part 1): Why Grab built a secure platform for autonomous AI Agents"
url: https://daily.dev/posts/palana-part-1-why-grab-built-a-secure-platform-for-autonomous-ai-agents-typnzz41h
source_url: https://engineering.grab.com/palana-part-1-secure-platform-for-ai-agents
type: article
source: "Grab Tech Blog"
published: 2026-06-19T01:35:05.624Z
updated: 2026-06-19T02:20:09.316Z
tags: ["security", "kubernetes", "llm", "ai-agents", "envoy"]
reading_time: 9
upvotes: 11
comments: 0
language: en
---

> ## Documentation Index
> Fetch the complete documentation index at: https://daily.dev/llms.txt
> Use this file to discover all available pages before exploring further.

# Palana (Part 1): Why Grab built a secure platform for autonomous AI Agents

**[Grab Tech Blog](https://daily.dev/sources/grab)** · 9 min read · 11 upvotes · 0 comments

## Summary

Grab's CyberSecurity team built Palana, a Kubernetes-native platform for running autonomous AI agents safely at scale. As AI agents evolved from IDE plugins into long-running workloads with network access, credentials, and persistent state, the traditional model of running them on developer laptops became inadequate. Palana addresses this by giving each agent an isolated Kubernetes namespace with scoped RBAC, storage, and network policies. Key design principles include: isolation as the unit of trust (each agent gets its own namespace and Vault scope), proxy-mediated credential injection (agents never see real credentials, only placeholders replaced at the proxy layer), observable egress via Envoy and OPA policy checks, and a control plane that operates entirely outside the agent process. The platform currently runs hundreds of agents including remote dev environments, Slack automations, and long-running task agents. Part 2 will cover the internal architecture in more detail.

## Full article

daily.dev links to this article rather than hosting it. Read it at the original source: <https://engineering.grab.com/palana-part-1-secure-platform-for-ai-agents>

## Similar posts on daily.dev

- [Grab Builds Secure Agentic AI Workload Platform](https://daily.dev/posts/grab-builds-secure-agentic-ai-workload-platform-kevmtzadh) · InfoQ · 0 upvotes · 0 comments

---

Tags: [#security](https://daily.dev/tags/security), [#kubernetes](https://daily.dev/tags/kubernetes), [#llm](https://daily.dev/tags/llm), [#ai-agents](https://daily.dev/tags/ai-agents), [#envoy](https://daily.dev/tags/envoy)

[View this post on daily.dev](https://daily.dev/posts/palana-part-1-why-grab-built-a-secure-platform-for-autonomous-ai-agents-typnzz41h)