Aglets are Java-based mobile agents developed at IBM's Tokyo Research Laboratory. This article describes a security model for the aglets development environment that supports flexible architectural definition of security policies.