Broadcom introduces zero-trust runtime for scalable AI agents

Industry News April 15, 2026 Share Broadcom introduces zero-trust runtime for scalable AI agents Broadcom has announced VMware Tanzu Platform agent foundations, introducing a secure-by-default agentic runtime designed to accelerate the delivery of autonomous AI applications. By extending the trusted code-to-production simplicity of Tanzu Platform to AI agents, Broadcom is enabling enterprise developers to move beyond siloed AI experiments and into scalable, governed production on VMware Cloud Foundation (VCF). From experimental AI to enterprise reality As AI agents begin to handle both software execution and autonomous decision-making, they require levels of governance and operational control that traditional platforms lack. Too often, organizations are forced to build AI projects in isolated environments that fail to integrate with core business data. Tanzu Platform agent foundations solve this by providing a pre-engineered platform as a service (PaaS) environment for agents, built directly upon the trusted infrastructure layer of VCF. This allows platform engineers to manage AI services with the same tools they use for mission-critical business applications, without needing to become AI or data experts. A deny-by-default runtime for the private cloud The new agentic runtime enforces a hard contract between developers and infrastructure, ensuring that agents remain within their authorized boundaries. Key innovations include: Immutable supply chain: Instead of unverified Dockerfiles, the platform uses trusted Buildpacks to build agent containers automatically patched and verified, enabling automatic patching and eliminating the risk of embedded malware. Structural secrets isolation: Prevents agents from reading each other’s credentials at runtime – closing the door on lateral movement. Combined with VMware vDefend, that protection extends across infrastructure services and external SaaS connections. Zero-trust networking and sandboxing: Limits runaway agentic loops through pre-defined resource limits. Connectivity to internal systems and models is never open by default. Access is explicitly granted only via secure service bindings, preventing wandering agents from accessing unauthorized data. A quick start for enterprise developers Tanzu Platform helps developers get started quickly, using a pre-built agent. Developers can give their agents governed access to models, Model Context Protocol (MCP) servers and marketplace services, all pre-curated by the IT organization. Agents can utilize integrated, enterprise-ready data engines, such as VMware Tanzu for Postgres with pgvector, caching, streaming, data flow services, and Spring AI memory services. Day two operations: Scaling agents on VMware Cloud Foundation Tanzu Platform agent foundations programmatically leverage VMware Cloud Foundation IaaS APIs to abstract infrastructure complexity away from developers, enabling agents and their dependent services to always have the resources like compute, networking, and storage they need. Additionally, Tanzu Platform leverages VMware vSphere Kubernetes Service (VKS) to deliver scalable marketplace services. Elastic environment: Automatically scales up and scales down underlying IaaS resources to optimize cost and performance of short-lived and long-running agents. High availability and lifecycle automation: Provides four layers of high availability and self-heals infrastructure so that mission-critical autonomous applications remain resilient. Model and tools serving and brokering: Offers a centralized AI gateway to control tools and model availability, usage, costs, and safety filters across public models and private models on VCF. “Agentic application development is evolving fast. We are partnering with our customers to innovate through this changing landscape. Tanzu Platform agent foundations give you a quick start to move your agentic ideas into production today on a modern private cloud with VMware Cloud Foundation 9,” said Purnima Padmanabhan, General Manager, Tanzu Division, Broadcom. ​“Security is a primary obstacle to AI adoption for our clients in highly regulated industries. Because of MomentumAI’s deep roots in mission-critical VCF and Tanzu Platform environments, we recognize the value of extending the benefits of a private cloud PaaS to agentic applications. Together with VCF and Tanzu, MomentumAI can provide a secure-by-default runtime with the reliability and governance capabilities our customers need to de-risk agentic applications,” Joe Fitzgerald, CEO, MomentumAI, continued. “A key strength of Tanzu Platform is the ability to help organizations move beyond the initial commitment to AI and start on their agentic AI journey. Outside of the tech industry organizations struggle with how to get started with agentic AI. We see a real need for guidance, frameworks, and SDKs to help organizations kickstart agentic AI initiatives. With this new release, Tanzu Platform can help these organizations move from a crawl phase to a walk phase, ensuring they can leverage executive buy-in that translates into scalable, value-generating agentic AI,” Matthew Flug, IDC Research Manager, Intelligent Application Modernization & Deployment Platforms, concluded. More about Broadcom Share