Arrakis alternatives
The 6 alternatives below are grouped by kind of sandbox, and each says what it does differently from Arrakis. Start from whatever made you look: missing GPUs, session limits, self-hosting, pricing or isolation.
Why teams look beyond Arrakis
A single-maintainer, AGPL microVM sandbox that stands out for bundling a GUI and snapshot/restore for self-hosters on Linux.
- Linux/KVM hosts only; no macOS or Windows support documented
- AGPL-3.0 may not suit every deployment
- No release tags, maturity label, boot-time figures or resource-limit documentation
Arrakis alternatives, by kind
Hosted sandbox platforms
SDK-driven sandboxes you create, run code in and destroy through an API.
E2B
Open-source cloud sandboxes for AI agents, each a Firecracker microVM, with pause/resume, snapshots and forking.
- Firecracker microVM
- Open source
- Self-hostable
- BYOC
- Pause/resume
How it differs: Code interpreters and short-to-medium-lived agent tasks that need microVM isolation, with an open-source self-host path. The safe default for most agent builders: mature, open source, microVM-isolated and widely supported.
Browser and desktop sandboxes
Hosted browsers and full desktops that computer-use agents click, type and browse in.
Cua
Open-source computer-use infrastructure: Linux sandboxes as gVisor containers and macOS or Windows sandboxes as VMs, run locally, in your own cloud account or as shared "Spaces".
- gVisor container or VM
- Open source
- Self-hostable
- Pause/resume
How it differs: Teams that want open-source computer-use sandboxes on their own Macs, servers or cloud accounts, including macOS VMs on Apple silicon. The broadest open-source option for computer-use sandboxes across macOS, Linux and Windows, now firmly a self-run toolkit after the hosted cloud shut down.
Open-source runtimes to self-host
Open-source sandbox runtimes you run on your own servers or Kubernetes.
BoxLite
Embeddable, daemonless microVM library that runs OCI images in hardware-isolated boxes on a laptop or server, with an optional managed cloud.
- microVM + jailer
- Open source
- Self-hostable
How it differs: Embedding a microVM sandbox directly in your own process on a laptop or server without running a daemon. A practical choice when you want microVM isolation embedded in your own process rather than behind a service.
Celesto (SmolVM)
Open-source microVM "computers" for agents from Celesto AI, published as the smolvm package, with Firecracker on Linux and QEMU on macOS, plus a hosted cloud option.
- Firecracker / QEMU microVM
- Open source
- Self-hostable
- Pause/resume
How it differs: Running agent computers as microVMs on your own Linux or Apple Silicon machine, with the same API available as a hosted cloud computer. A young, alpha-labelled but feature-rich open-source microVM runtime that is easy to try locally on macOS or Linux and has a per-hour cloud behind it.
Microsandbox
Open-source, local-first microVM runtime that gives each sandbox its own Linux kernel, with an optional managed cloud.
- MicroVM (libkrun)
- Open source
- Self-hostable
- BYOC
- Snapshots
How it differs: Self-hosted microVM isolation on developer machines or your own servers. The most approachable way to get microVM-grade isolation locally or self-hosted.
Isolation primitives and runtimes
The hypervisors, user-space kernels, OS sandboxes and WebAssembly runtimes that sandbox platforms build on.
Firecracker
The KVM-based microVM monitor from AWS that underpins Lambda and Fargate, and the sandboxes of E2B, Vercel, Fly.io, Koyeb and Northflank.
- KVM microVM
- Open source
- Self-hostable
- Pause/resume
How it differs: Building your own microVM sandbox fleet on Linux hosts with KVM. The reference microVM primitive for sandbox platforms; choose it when you are building a platform rather than consuming one.
Arrakis vs alternatives
| Sandbox | Isolation | Open source | Self-host / BYOC | Cold start (vendor) | Max session | Snapshots / pause | GPU | SDKs |
|---|---|---|---|---|---|---|---|---|
| Arrakis | Cloud Hypervisor microVM | Yes | Yes / No | Not documented | Not documented | Yes / Not documented | Not documented | Python, REST API, CLI, MCP server |
| BoxLite | microVM + jailer | Yes | Yes / No | ~1 s (claim) | Not documented | Not documented / Not documented | Not documented | Python, JavaScript/TypeScript, Go, Rust, C, CLI, REST API |
| Celesto (SmolVM) | Firecracker / QEMU microVM | Yes | Yes / No | ~500 ms (claim) | Not documented | Yes / Yes | Not documented | Python, JavaScript/TypeScript, CLI, MCP server |
| Cua | gVisor container or VM | Yes | Yes / No | Not documented | Until destroyed | Yes / Yes | Not documented | Python, JavaScript/TypeScript, Rust, CLI, MCP server |
| E2B | Firecracker microVM | Yes | Yes / Yes | Not documented | 1 h / 24 h (Pro) | Yes / Yes | No | Python, JavaScript/TypeScript |
| Firecracker | KVM microVM | Yes | Yes / No | <125 ms (spec) | Not documented | Yes / Yes | No | REST API, CLI |
| Microsandbox | MicroVM (libkrun) | Yes | Yes / Yes | <100 ms | Not documented | Yes / Not documented | No | TypeScript, Python, Rust, Go, Ruby, CLI, MCP server |
Frequently asked questions
What are the main alternatives to Arrakis?
Is there an open-source alternative to Arrakis?
Cite this page
Agent Sandboxes. (2026). Arrakis alternatives. agentsandboxes.org. Last reviewed November 9, 2026. https://agentsandboxes.org/alternatives/arrakis/
Found an error or a missing sandbox? Submit a correction — every entry links to the sources it relies on.