The independent reference for AI agent sandboxesLast reviewed
Agent Sandboxesagentsandboxes.org
Sandbox profile · Hosted platform

Daytona

Answer in brief

Stateful sandboxes for AI-generated code — Linux containers, Linux and Windows VMs, macOS and GPU sandboxes — with snapshots, volumes and preview URLs. The strongest choice for stateful coding-agent workspaces and breadth of sandbox types; note the shift away from open source.

By the Agent Sandboxes editors · Updated

Overview

Daytona pivoted from development environments to agent infrastructure and has become one of the most popular sandbox platforms. Sandboxes are stateful by default — they stop when idle and resume with files intact — which suits coding agents that return to the same workspace. It offers Linux containers, Linux and Windows VMs, macOS and GPU sandboxes from one API.

Daytona’s SDK coverage (Python, TypeScript, Ruby, Go and Java) is the broadest among hosted providers, and BYOC lets you run sandboxes on your own runner nodes. In June 2026 Daytona moved core development to a private codebase and archived its public AGPL repository, so it should now be treated as a proprietary platform.

Notable

  • Raised a $24M Series A in February 2026, led by FirstMark Capital.
  • Archived its open-source repository in June 2026; development continues privately.
  • Lists LangChain, SambaNova, Writer and n8n among customers.

Daytona specifications

AttributeDetails
IsolationIsolated Linux containers (dedicated namespaces, resource limits) by default; VM sandboxes (Linux, Windows) run a full VM with their own kernel; GPU sandboxes are containers with exclusive GPU allocation
DeploymentHosted platform · BYOC available
Open sourceNo (Former public repo archived (AGPL-3.0))
SDKs and interfacesPython, TypeScript, Ruby, Go, Java
Cold start (vendor claim)Sub-90 ms sandbox creation (vendor claim)
Max session lengthNo hard maximum: auto-stop after 15 min idle by default (can be disabled), auto-archive after 7 days stopped, optional wall-clock TTL
PersistenceStateful sandboxes, snapshots, shared volumes, archive/recover and stop/start with state. Pause/resume, fork and hot snapshots on VM sandboxes
GPUYes — up to 8 GPUs per sandbox (e.g. H100 from $2.27/hour, B200 $3.59/hour, preemptible list rates)
NetworkingTiered egress: per-sandbox CIDR and domain allowlists or block-all, changeable at runtime; preview URLs for any port with token or signed URLs; SSH, VNC and web terminal
PricingPer second: $0.0504 per vCPU-hour + $0.0162 per GiB-hour; storage $0.000108/GiB-hour after 5 GiB free; Windows $0.0858/vCPU-hour
Free tier$200 free compute for new users; startup program up to $50k
ComplianceStates HIPAA, SOC 2 and GDPR compliance (Trust Center)
RegionsUS East, US West, EU Central, EU West, India; custom regions via BYOC

Facts from Daytona’s public documentation, verified November 8, 2026. Performance numbers are vendor claims.

Strengths and trade-offs

Strengths

  • You need long-lived, stateful workspaces that survive between sessions
  • You want SDKs beyond Python and TypeScript (Ruby, Go, Java)
  • You need GPUs, Windows or macOS sandboxes from the same provider
  • You want BYOC on your own compute

Trade-offs

  • No longer actively open source — the public repo is archived
  • Default Linux sandboxes use container isolation; VM isolation requires VM sandboxes
  • Fork and pause/resume limited to VM sandboxes

Best for: Long-lived, stateful agent workspaces that need many SDK languages, GPUs, or Windows and macOS sandboxes.

Where Daytona ranks

How Daytona compares

SandboxIsolationOpen sourceSelf-host / BYOCCold start (vendor)Max sessionSnapshots / pauseGPUSDKs
DaytonaContainers or VMsNoNot documented / Yes<90 msUnlimitedYes / YesYesPython, TypeScript, Ruby, Go, Java
E2BFirecracker microVMYesYes / YesNot documented1 h / 24 h (Pro)Yes / YesNoPython, JavaScript/TypeScript
Fly.io SpritesMicroVMNoNo / No0.1–2 s wakeUnlimitedYes / YesNoJavaScript/TypeScript, Go, Python, Elixir
Modal SandboxesgVisor or VMNoNo / Not documented<1 sUp to 24 hYes / YesYesPython, JavaScript/TypeScript, Go
Vercel SandboxFirecracker microVMNoNo / NoMilliseconds (claim)24 h (Pro)Yes / YesNot documentedJavaScript/TypeScript, Python
Together Code SandboxMicroVMNoNo / Not documented0.5 s (snapshot)Until terminatedYes / YesNot documentedPython, TypeScript
Northflank SandboxesCloud Hypervisor microVMNoNo / Yes<1 sUnlimitedNot documented / YesYesJavaScript/TypeScript, Python

Head-to-head: E2B vs Daytona · Daytona vs Modal Sandboxes · Daytona vs Vercel Sandbox · Daytona vs Cloudflare Sandbox SDK · Daytona vs Fly.io Sprites · Freestyle vs Daytona

See all Daytona alternatives →

Frequently asked questions

What is Daytona?
Stateful sandboxes for AI-generated code — Linux containers, Linux and Windows VMs, macOS and GPU sandboxes — with snapshots, volumes and preview URLs. The strongest choice for stateful coding-agent workspaces and breadth of sandbox types; note the shift away from open source.
How does Daytona isolate code?
Daytona documents its isolation as: Isolated Linux containers (dedicated namespaces, resource limits) by default; VM sandboxes (Linux, Windows) run a full VM with their own kernel; GPU sandboxes are containers with exclusive GPU allocation.
Is Daytona open source?
No, Daytona is not open source. It does offer a bring-your-own-cloud deployment.
How much does Daytona cost?
Per second: $0.0504 per vCPU-hour + $0.0162 per GiB-hour; storage $0.000108/GiB-hour after 5 GiB free; Windows $0.0858/vCPU-hour Check the official pricing page for current rates.
What are the best Daytona alternatives?

Sources

  1. daytona.io/
  2. daytona.io/pricing
  3. daytona.io/docs/en/sandboxes/
  4. daytona.io/docs/en/isolation/
  5. daytona.io/docs/en/network-limits/
  6. daytona.io/docs/en/regions/
  7. github.com/daytonaio/daytona

Cite this page

Agent Sandboxes. (2026). Daytona. agentsandboxes.org. Last reviewed November 8, 2026. https://agentsandboxes.org/sandboxes/daytona/

Found an error or a missing sandbox? Submit a correction — every entry links to the sources it relies on.