A private cloud platform for AI agents and the apps that run alongside them.

What's new in 10.4

The PaaS, extended for agents.

Tanzu Platform has been a PaaS for over a decade - Cloud Foundry roots, Java and Spring integration to the bones, the day-two stuff most teams forget about until they're running it in production. The 10.4 release extends that to the new shape of work: AI agents, MCP servers, and the harnesses being built around them.

For agentic apps

Agent Foundations.

• Deny-by-default runtime Zero-trust networking, structural secrets isolation, and an isolated agent sandbox so agents can't wander where they shouldn't.
• MCP Gateway Every tool call routed through one place. OIDC "digital passports" tie each agent's actions back to a verifiable identity, with an audit trail you can actually use.
• Service marketplace A curated catalog of MCP servers, LLMs, databases, and ISV tools. Self-service binding, with credentials injected by the platform - developers and agents never handle secrets.
• Persistent agent memory Long-term memory via Tanzu Postgres with pgvector and Spring AI chat memory. Useful for the agent-as-coworker scenarios that span hours or days.
• Showback & chargeback Per-application cost visibility. So you can find which agent is burning through the budget.
• Agent buildpack (tech preview) Curated execution framework for Java/Spring AI and Python. Bind a model, integrate MCP servers and private data, deploy.

For everything else

Still a PaaS.

It's easy to lose track of it in all the AI talk, but Tanzu Platform still does what it's always done: a private cloud platform for running applications, integrated with Spring, self-service services and data, and the platform engineering bits that make day-two manageable. Over a decade running some of the most critical applications out there.

Build apps in Java, .NET, Node.js, Python, Go, Ruby, PHP, static sites - and any other binary or Docker image you want to deploy.

Spring security

Hold back the AI security tidal wave.

Historically, the trickle of a security vulnerability in this library, or that library, is something that was very manageable. What's happened with frontier AI is that what was a trickle has now turned into a tidal wave. Ryan Morgan, Head of Spring R&D, Tanzu

Frontier AI models have dramatically changed how you have to think about security in your platform stack. The security landscape for Spring has shifted, and modern threats move faster than traditional advisories. See how Tanzu is closing the gap with day-zero patches, deep dependency scanning, and accelerated deployment. Learn how to protect your enterprise infrastructure and move from a reactive posture to a structural advantage. See how we're addressing it at enterprise.spring.io.

The data side

Because agents are only as smart as the data they reach.

You get the data services you actually need. The open source ones you'd have picked anyway - Postgres, MySQL, RabbitMQ, Valkey, and Apache Kafka, new in 10.4 - as on-demand instances a developer creates and binds to an app, with the platform doing the provisioning, the day-two operations, and the credentials. Plus the high-performance side when you want it: GemFire for in-memory data, and Greenplum plus Tanzu Data Intelligence for data at scale.

Start

Ninety days. Real platform. Real apps.

Read the kit, stand up Tanzu Platform for ninety days, run a real PoC. If it doesn't earn its keep, you've spent a quarter tire-kicking - which is what you were going to do anyway trying to build your own platform. At least you'll be ready on day 91.

More Tanzu

Keep going.

• Tanzu Catsup Weekly discussions on platform engineering, AI, and security.
• Cloud Foundry Weekly Weekly discussions and guests on everything Cloud Foundry and Tanzu Platform related.
• Tanzu blog The latest from Tanzu and upcoming events.
• Tanzu Platform's 15 Year Headstart Cora goes over why Tanzu Platform is great for your private cloud AI stack.

The official stuff

Prefer the official data sheet and snazy web pages experience? See the Tanzu Platform overview, the docs, and demos and videos. Or read Darin Zook's 10.4 launch post and Camille Crowell-Lee's deep dive on Agent Foundations.