Broadcom introduced VMware Private AI Cloud at VMware Explore 2026 this week, and the governance layer built into it says as much about the platform’s philosophy as the AI capabilities themselves: agents get almost nothing by default, and every permission has to be explicitly granted.
The offering combines VMware Cloud Foundation 9 with a new AI Factory, validated models, Tanzu agent-development tools, and a governance layer called AgentMinder. Prashanth Shenoy, who leads marketing for VMware’s cloud platform division, described the pitch as combining private cloud infrastructure with private AI services so enterprises get production-grade inference alongside the data sovereignty and cost predictability many have been asking for.
VCF 9 already has more than 3,000 customer deployments running across over 19 million allocated processor cores, and Broadcom said its memory-tiering technology has cut per-host costs by up to 42% in real deployments. The platform supports accelerators from AMD, Intel, and Nvidia, plus more than 150 open-source and commercial models, including recent additions like Nvidia’s Nemotron 3 and Alibaba’s Qwen 3.7-Max.
The governance piece is where this gets specific. Tanzu Platform, positioned as the agent layer, runs agents inside deny-by-default sandboxes, meaning no API access, no network access, and no internet unless someone explicitly grants it. Credentials sit in a separate store agents can’t view directly. AgentMinder, available now, adds another layer on top, assigning agents individual identities and checking every action against their declared mission and authorized resources before it goes through.
Clayton Donley, who runs Broadcom’s Identity Management Security Division, described AgentMinder as sitting between an organization’s agents and the systems those agents call, whether that’s language models, APIs, or other enterprise tools. Broadcom said it already uses similar technology internally to manage close to 36 million customer-related API calls a day.
The company also introduced TrueSource, a supply-chain security package covering Java, Python, and Node.js dependencies, along with hardened container images and database services. Broadcom said it uses AI to scan more than 5,000 libraries in its dependency tree but has engineers review every fix before it goes upstream.
Tanzu’s newer capabilities become generally available this fall. Broadcom hasn’t disclosed pricing for any of it.
