Meet Moment

Security Sandboxing

Browser Automation Containment: Zero-Credential Leakage

Running headless browser agents (Puppeteer, Playwright) on behalf of users carries severe SSRF and credential extraction vulnerabilities if uncontained.

The Momentaic Containment Protocol

All browser subagents operate within ephemeral, single-use container runtimes with strict egress firewalls blocking access to local metadata endpoints and private IP ranges.

Read Momentaic Security Overview
More guides