OpenAI Buys Ona to Help Rein in AI Agents

Why It Matters

By adding Ona’s sandbox infrastructure, OpenAI can offer enterprises a governed, VPC‑based environment for AI agents, reducing security and cost risks and sharpening its competitive edge against Anthropic in the lucrative corporate coding market.

Key Takeaways

• OpenAI acquires Ona to add secure, persistent cloud workspaces for AI agents
• Ona’s 79‑person team serves large enterprises, with weekly sessions up 13×
• Estimated acquisition value ranges $450‑$500 million based on 30× revenue multiple
• Move counters Anthropic’s upcoming self‑hosted sandbox for Claude Managed Agents
• Provides Codex with enterprise‑grade governance, audit trails, and VPC deployment

Pulse Analysis

Enterprises have long hesitated to deploy fully autonomous AI agents because of security, cost, and governance concerns. OpenAI’s purchase of Ona directly addresses those pain points by integrating a cloud development environment that offers persistent, isolated workspaces, credential management, and audit trails. This infrastructure lets agents retain context across sessions while operating within a company‑controlled virtual private cloud, dramatically lowering the risk of data loss, runaway token consumption, or malicious exploitation. The move signals OpenAI’s shift from a pure model provider to a full‑stack AI platform, echoing the broader industry trend of bundling safety layers with powerful generative models.

The deal also reshapes the competitive landscape. Anthropic is set to launch Claude Managed Agents with self‑hosted sandboxes in mid‑2026, a clear challenge to OpenAI’s Codex. By securing Ona’s technology now, OpenAI not only pre‑empts Anthropic’s offering but also strengthens its value proposition for large‑scale developers who demand integrated security and compliance. Analysts peg Ona’s 2025 revenue at roughly $7 million and project 2026 earnings of $10‑$15 million, implying a purchase price near $500 million at a 30‑times multiple—a sizable bet on enterprise AI adoption.

Looking ahead, the acquisition could accelerate OpenAI’s push into enterprise development tools, a segment where Microsoft’s Azure DevOps and Google’s Cloud AI have already made inroads. With Ona’s platform, OpenAI can embed Codex into existing CI/CD pipelines, offer granular access controls, and provide persistent state for complex coding tasks. This could unlock new revenue streams beyond token usage, positioning OpenAI as a one‑stop shop for secure, production‑grade AI agents. As enterprises continue to prioritize governance and cost predictability, the integration of secure sandboxes may become a decisive factor in choosing an AI partner.