Agent sandbox directory

Hosted platforms

• gVisor · Open sourceBeam SandboxesServerless AI compute platform whose sandboxes are gVisor-isolated containers with memory snapshots, optional GPUs and an open-source, self-hostable runtime.
• MicroVMBlaxelPerpetual microVM sandboxes for AI agents that drop to standby when idle and resume with memory intact, plus volumes, batch jobs and MCP hosting.
• MicroVM · Open sourceCloudflare Sandbox SDKA TypeScript SDK for Cloudflare Workers that runs untrusted code in Linux sandboxes backed by Cloudflare Containers and Durable Objects.
• Container or VMDaytonaStateful sandboxes for AI-generated code — Linux containers, Linux and Windows VMs, macOS and GPU sandboxes — with snapshots, volumes and preview URLs.
• MicroVM · Open sourceE2BOpen-source cloud sandboxes for AI agents, each a Firecracker microVM, with pause/resume, snapshots and forking.
• MicroVMFly.io SpritesPersistent, hardware-isolated Linux computers for AI agents with a durable 100 GB disk, checkpoints, and no compute charges while idle.
• Virtual machineFreestyleFull Linux VMs for AI agents with live forking of running VMs, memory-preserving hibernation, VPCs and nested virtualization.
• MicroVMKoyeb SandboxesEphemeral microVM sandboxes on Koyeb’s serverless platform for AI-generated code, with CPU or GPU and scale-to-zero.
• gVisorModal SandboxesSandboxes on Modal’s serverless compute platform for running untrusted code at very high scale, with GPUs, snapshots and tunnels.
• Virtual machineMorph CloudVM-based cloud computers for AI agents built on “Infinibranch” snapshot, branch and restore, plus persistent Devboxes.
• MicroVMNorthflank SandboxesSandboxes on Northflank’s Kubernetes-based platform — microVMs for CPU work, gVisor for GPUs — on Northflank’s cloud or in your own cloud account.
• MicroVMTogether Code SandboxTogether AI’s microVM sandbox service, built on the CodeSandbox acquisition, with snapshot-based starts, hibernation, cloning and preview URLs.
• MicroVMVercel SandboxFirecracker microVM sandboxes on Vercel’s infrastructure, persistent by default and billed on active CPU, with fine-grained egress control.

Cloud provider services

• MicroVMAWS Bedrock AgentCoreAWS’s managed agent platform: a Code Interpreter tool for running agent-generated code and a Runtime that hosts each agent session in its own microVM.
• Virtual machineAzure Container Apps dynamic sessionsAzure service that hands out Hyper-V-isolated sessions from prewarmed pools, either as a built-in code interpreter or running your own container image.
• gVisorGoogle Agent Platform Code ExecutionGoogle-managed sandbox API (formerly part of Vertex AI Agent Engine) that lets agents deployed anywhere run Python in stateful, network-isolated environments.
• Virtual machineOpenAI Code Interpreter & Hosted ShellHosted containers in the OpenAI Responses API that the model uses to run Python (Code Interpreter) or shell commands (Hosted Shell).

Open-source projects

• gVisor · Open sourceKubernetes Agent SandboxOpen-source Kubernetes controller and CRDs for isolated, stateful sandbox pods for AI agents, with first-class support on GKE.
• MicroVM · Open sourceMicrosandboxOpen-source, local-first microVM runtime that gives each sandbox its own Linux kernel, with an optional managed cloud.

Local / OS-levels

• OS-level · Open sourceAnthropic Sandbox RuntimeOpen-source CLI and library (`srt`) that restricts filesystem and network access for any local process at the OS level, without a container or VM.
• MicroVMDocker SandboxesDocker’s `sbx` CLI for running AI coding agents in microVM sandboxes on your machine, with an experimental Docker-hosted cloud.

Also tracked

Newer or adjacent sandboxes we are monitoring. Descriptions summarise each provider’s own materials; full profiles will follow as we verify them.

Discontinued or winding down

• Winding downRunloopWinding down — existing users should migrate before November 13, 2026.
• DiscontinuedRizaDiscontinued — use an active code-interpreter sandbox instead.