Teleport Beams
Overview
Product details compiled from public sources, each with a citation.
Matrix Coverage
Where this product defends, by asset class and NIST CSF function. The Coverage column shows whether each asset is Primary, Secondary, or Adjacent to what the product does. The table omits empty rows and columns.
| Asset class | Protect | Detect | Coverage | Source |
|---|---|---|---|---|
| AI-Workload Platforms | Primary | 3 | ||
| AI Agent Identities | Detect: Not covered | Primary | 3 |
Framework Relevance
These frameworks include controls relevant to the asset classes Teleport Beams defends. This is an editorial inference from the AI Defense Matrix asset-level crossmap, not a statement that Teleport implements these controls or is certified against them.
Expand Collapse
| Framework | Asset class | Relevant controls |
|---|---|---|
| NIST IR 8596 | AI-Workload Platforms | Containers, microservices, and libraries (AI-specific subset); inference endpoints (platform side) |
| AI Agent Identities | Agents as autonomous principals; Keys; Integrations and permissions | |
| CSA AI Controls Matrix | AI-Workload Platforms | Infrastructure Security; Threat & Vulnerability Management |
| AI Agent Identities | IAM; Governance, Risk and Compliance | |
| ISO 42001 | AI-Workload Platforms | A.6 AI system life cycle; A.4 Resources for AI systems |
| AI Agent Identities | A.9 Use of AI systems; A.3 Internal organization; A.5 Assessing impacts of AI systems | |
| Google SAIF | AI-Workload Platforms | Expand strong security foundations; secure and harden the AI deployment environment |
| AI Agent Identities | Focus on Agents (explicit SAIF section); identity, authorization, and delegation controls | |
| SANS Critical AI Security Guidelines | AI-Workload Platforms | Conventional Security Controls (host AI within the existing ISMS; authentication and access controls; encryption at rest); AI Supply Chain Management (local vs. SaaS hosting trade-offs; internal model garden) |
| AI Agent Identities | Secure Agentic Systems and AI Autonomy Controls (defined function scope; API and function-call gating; escalation and fallback); Limit Model Behavior (least-privilege focused functionality; human oversight; override capabilities) | |
| MITRE ATLAS | AI-Workload Platforms | AML.T0010 AI Supply Chain Compromise; AML.T0012 Valid Accounts (platform credential abuse); container and inference-server exploits |
| AI Agent Identities | AML.T0053 AI Agent Tool Invocation; credential and delegation-chain abuse | |
| OWASP AI Exchange | AI-Workload Platforms | Development-time threats: supply chain attacks, model-platform CVEs, container escape |
| AI Agent Identities | Runtime threats: unauthorized agent actions, capability abuse, delegation chain exploitation | |
| OWASP LLM Top 10 | AI-Workload Platforms | LLM03 Supply Chain (compromised AI platform components); LLM04 Data and Model Poisoning (via platform) |
| AI Agent Identities | LLM06 Excessive Agency; LLM05 Improper Output Handling; unauthorized actions by AI agents | |
| OWASP Agentic Security Top 10 | AI-Workload Platforms | ASI04 Agentic Supply Chain Vulnerabilities (model and tool-platform components); ASI08 Cascading Failures (platform fault propagation) |
| AI Agent Identities | ASI03 Identity and Privilege Abuse; ASI10 Rogue Agents; ASI09 Human-Agent Trust Exploitation; ASI02 Tool Misuse and Exploitation (when tied to agent permissions) |
Provenance
Last sourced 2026-06-10.
Expand Collapse
Sources
- Teleport Beams launch press release
- Teleport Security
- “We maintain SOC 2 Type II, ISO 27001, and HIPAA Security Rule compliance for our cloud and self-hosted products”
- Teleport Beams product page
- “Beams runs each agent in an isolated Firecracker VM with built-in identity.”
- “Issues a short-lived identity certificate to each beam. No static keys.”
Changelog
-
Added verbatim source quotes to coverage and compliance citations.
-
Added to the catalog from the Teleport Beams product page and launch press release.
Found an error? Corrections are welcome. Suggest an edit.