Ring Zero Security joins the NVIDIA Inception program

Ring Zero Security has joined the NVIDIA Inception program. Inception is NVIDIA's program for startups that build with accelerated computing. Members receive developer resources and training. They get access to NVIDIA hardware and software. They also get introductions to technical and investment partners who work on similar problems.

What Ring Zero does

Ring Zero is runtime security for AI agents. It stops an agent before the agent takes a harmful action on a machine. It does this in the operating system kernel, below the agent and the tools the agent uses. Content that an agent reads can override rules written in the agent's instructions. Content cannot override rules that the operating system enforces.

The product has two parts. The operating system enforces the rules. Decision models run on the same machine. They decide if an agent's behavior is an attempt to get around those rules. These models are the part of Ring Zero that NVIDIA's platform helps most directly.

How Ring Zero will use the program

Training. Ring Zero trains and tests its decision models in its own lab on NVIDIA GPUs. The training data is a growing collection of real attempts by agents to work around their rules. The program's resources and hardware access let a small team improve these models quickly.

Deployment. Ring Zero will release decision models that run on the CPU of the machine they protect. These models judge each action on the device, and no data leaves that device. Customers can run Ring Zero's deeper analysis of a full agent session on their own NVIDIA GPUs. No transcript, file, or credential has to leave the customer's environment.

Agent infrastructure. More and more agents run in sandboxes and on GPU-backed infrastructure, not on a single laptop. Ring Zero works within NVIDIA's ecosystem so that the same policy and the same audit trail apply wherever the agent runs.

What stays the same

Ring Zero remains open source. The kernel enforcement is licensed under GPL-2.0, and the daemon and application are licensed under Apache-2.0. Membership in the program does not change any license.

Membership in a program is not a security claim. Ring Zero says that a protection blocks something only after it has blocked that thing on a customer's machine.

Why this matters

Today the kernel refuses a direct attempt by an agent to read a private key, by every available route. The harder problem is the indirect attempt. The agent writes a script, schedules a job, or instructs another agent. That second step does what the agent was told not to do. To catch this, a model must read what the agent produces. The model must also be reliable enough to act on. That reliability comes from laboratory work. The NVIDIA Inception program speeds up that work.

Teams that build or secure agents on NVIDIA infrastructure are invited to get in touch.

#NVIDIAInception