Citrix has expanded Platform Flex with two new services aimed at issues that are beginning to intertwine within enterprises: observing what truly happens in digital workplaces and providing controlled environments where developers and artificial intelligence agents can execute code. Experience Insights Flex leverages Splunk Cloud Platform as its analytical foundation, while SecurSpaces Flex moves development and agentic workloads to Linux environments hosted and managed by Citrix.
The key points of Citrix Platform Flex in 20 seconds
- SecurSpaces Flex offers isolated Linux environments for developers and AI agents.
- Citrix manages infrastructure, scaling, databases, and control plane; the customer maintains control over identity, code, policies, and data.
- Experience Insights Flex gathers telemetry from desktops, applications, network, browser, and security.
- Its analytical layer is based on Splunk Cloud Platform.
- Both services are now available within the Platform Flex credit model.
This innovation extends beyond traditional desktop virtualization. The rise of agents capable of writing code, executing commands, and using tools is creating a new category of workload. It’s no longer enough to control which device a user is operating from—it’s also necessary to decide where an agent can work, what resources it can access, and what happens to the code or credentials it uses.
Citrix aims to leverage its experience in virtual desktops to occupy part of this new space.
SecurSpaces Flex: a workplace environment also for AI agents
Citrix SecurSpaces Flex provides standardized Linux environments for programming, compiling, and testing software without necessarily running these tasks on the developer’s laptop.
So far, the proposal resembles other cloud development environments.
The difference is that Citrix explicitly considers AI agents and their harnesses among the workloads that can run within these environments.
A harness can be understood as the layer surrounding the agent that determines what tools it can use, what permissions it receives, how it executes actions, and what limits are imposed.
This matters because a modern programming agent can do much more than suggest lines of code. It can open files, modify repositories, install dependencies, run applications, or use external tools.
The more autonomy it has, the greater the need to limit its environment.
SecurSpaces Flex enables control over inbound and outbound traffic, combining execution environments with Data Loss Prevention (DLP), role-based access control, and auditing, according to Citrix.
The declared goal is to reduce exposure of source code, data, and credentials by moving workloads from end devices to cloud-governed spaces.
Responsibility is also redistributed.
Citrix manages hosting, control plane, databases, workspaces, and scaling. Organizations retain control over their identity, source code, policies, and data.
This arrangement may be particularly attractive to companies wanting to experiment with agents without building all the necessary infrastructure beforehand to isolate them.
Sandbox as a new enterprise infrastructure
The term sandbox has been part of computing for decades. The difference now is who needs these isolated spaces.
Until recently, sandboxes were used to analyze malware, execute unknown code, or separate certain development environments.
Agentic AI is expanding that problem.
An assistant that merely answers questions has a relatively limited scope. An agent connected to a repository, terminal, database, or enterprise tools can modify systems.
Citrix defines SecurSpaces Flex as a platform for providing both governed development environments and agentic sandboxes.
The idea is that an organization can quickly provide a temporary environment with enough resources for a task and then delete or downsize it, without relying on a high-performance workstation.
This can also practically mean that part of the hardware traditionally needed by developers can be moved to the data center.
Citrix claims this architecture can extend device lifespans and reduce dependence on powerful laptops. It’s an advantage promoted by the vendor, though the actual economic benefit depends on resource consumption, user count, and contracted costs.
This model also aligns with another recent Citrix move. In July, the company expanded NetScaler AI Gateway with MCP Gateway features, aimed at controlling traffic between language models, agents, and servers based on the Model Context Protocol (MCP).
SecurSpaces operates at a different layer, but both proposals address the same challenge: when AI begins acting on real systems, companies need to control not only the model itself but also its connections and execution environments.
Experience Insights Flex gathers desktop telemetry
The second addition tackles a different issue.
Citrix Experience Insights Flex aims to consolidate information from Citrix DaaS sessions, endpoints, applications, network connections, browsers, SaaS, and security signals.
Citrix provides ready-made dashboards and manages the analytical infrastructure.
The underlying technology comes from Splunk Cloud Platform, the data analysis platform from Splunk, owned by Cisco.
Splunk Cloud allows collecting, indexing, searching, and visualizing operational data in the cloud, along with alerts and other analysis tools.
The integration aims to prevent companies from deploying separate analytical infrastructure solely for processing the telemetry generated by their workspaces.
The same data can be used from different perspectives.
IT teams can investigate performance issues or analyze post-upgrade incidents.
Security teams can utilize telemetry during investigations, verify detections, or locate configuration deviations from policies.
The goal is to reuse a single operational database.
Performance and security are often interconnected. A strange network connection might be a network issue or a security threat. A configuration change could explain poor application performance and simultaneously create an exposure.
Platform Flex evolves beyond a DaaS consumption model
Citrix announced Platform Flex in May 2026, with DaaS Flex as its first service.
The approach introduced a profile-based or persona system. Instead of assigning the same configuration to all users, Citrix differentiates resource needs to tailor infrastructure to user types.
DaaS Flex permits deploying applications and virtual desktops via Citrix Cloud, with Citrix managing the underlying infrastructure. Initially, it was available for Azure environments.
Platform Flex adds another feature: credits.
Companies acquire a pool of Flex Credits that can be consumed across included services.
It’s important to clarify that “flexible” does not necessarily mean paying only for active runtime minutes. Citrix’s documentation describes different consumption mechanisms depending on the service. In DaaS Flex, for example, certain personas are billed monthly based on the number of configured unique users, even if they don’t actively use the service.
Unused credits expire at the end of the subscription period, according to current Citrix conditions.
The addition of Experience Insights and SecurSpaces now broadens the concept beyond just virtual desktops.
An organization can use the same credit pool to combine various environment types. Citrix cites an example of a developer using DaaS Flex for email, office applications, and collaboration, while using SecurSpaces for programming.
From virtual desktop to work environment for people and agents
Arguably, this is the most interesting part of the announcement.
For years, the virtualization of workplaces was centered around a simple question: how to securely provide the applications and desktops that a person needs?
Agentic AI introduces another layer.
What environment is provided to software that can also perform tasks?
A programming agent might need CPU, memory, storage, access to Git, packages, APIs, temporary secrets, and connections to internal tools.
But it shouldn’t necessarily receive the same level of access as the developer actively using it.
It also makes little sense to assign each agent a physical laptop.
Isolated execution environments thus emerge as a new layer of enterprise AI infrastructure.
Citrix isn’t alone in this approach. Major development and agent platform providers are increasingly deploying remote environments, containers, and ephemeral virtual machines to run tasks without granting unlimited device or infrastructure access.
Citrix aims to differentiate by applying familiar concepts—identity, policies, isolation, auditing, and centralized control—to these environments.
SecurSpaces Flex and Experience Insights Flex are available since August 11, 2026, according to Citrix.
The question now is whether companies prefer to consume these environments as managed services within Citrix or build them on their current Kubernetes, VMs, and cloud development platforms.
What’s clear is that the scope of what needs to be managed is changing. The enterprise workspace is no longer necessarily confined to the user and their device.
Now, another software worker may be executing commands on the other side.
Frequently Asked Questions
What is Citrix SecurSpaces Flex?
It is a Citrix-hosted service providing controlled Linux environments for software development, compilation, and testing. It is also designed to run AI agents and their tools within managed sandboxes.
What does an organization control when using SecurSpaces Flex?
According to Citrix, they manage the infrastructure, hosting, databases, environments, and scaling, while the customer retains control over identity, source code, policies, and data.
What is the purpose of Citrix Experience Insights Flex?
It consolidates telemetry from desktops, endpoints, applications, network connections, browsers, SaaS, and security signals to assist in investigating experience, performance, and security issues.
What is the relationship between Citrix and Splunk in this service?
Experience Insights Flex uses Splunk Cloud Platform as its analysis engine. Citrix delivers the service via a managed model and provides dashboards designed to work with the collected telemetry.
via: citrix
