Sandboxes for running untrusted code
Untrusted code is code you did not write and cannot review first, such as code from a model or from a user of your product. 62 of the 79 providers listed here give each sandbox its own kernel.
Updated
What running untrusted code needs
Four things to look for in the table below
Providers and what they offer for this79 providers
Provider
Isolation
Max session
Free tier
2 vCPU · 4 GiB per hoursorted, low to high
Agent37 CloudPersistent Linux sandboxes and VMs for code and agents.- Isolation
- gVisor
- Free tier
- $5 credit
- 2 vCPU · 4 GiB
- $0.006
Hugging Face SandboxesIsolated cloud machines for running AI-generated code.- Isolation
- Full VM
- Free tier
- Not listed
- 2 vCPU · 4 GiB
- $0.010
Lizard SandboxesFirecracker microVM sandboxes for AI agents.- Isolation
- Firecracker
- Free tier
- 7-day trial
- 2 vCPU · 4 GiB
- $0.016
boatPersistent Ubuntu VMs with SSH, Docker and a desktop.- Isolation
- Full VM
- Free tier
- Free trial with 25 hours
- 2 vCPU · 4 GiB
- $0.018
Koyeb SandboxesSandboxes for AI agents, run as Koyeb Instances.- Isolation
- MicroVM
- Free tier
- Not listed
- 2 vCPU · 4 GiB
- $0.029
Celesto CloudCloud computers for AI agents, each in a microVM.- Isolation
- MicroVM
- Free tier
- $5 credit
- 2 vCPU · 4 GiB
- $0.030
tamaLinux VMs with GPUs, billed by the second.- Isolation
- Full VM
- Free tier
- Not listed
- 2 vCPU · 4 GiB
- $0.045
Mosaic SandboxLinux microVM sandboxes for coding agents.- Isolation
- Firecracker
- Free tier
- Not listed
- 2 vCPU · 4 GiB
- $0.050
Bunny SandboxIsolated cloud sandboxes for AI agents, run on gVisor.- Isolation
- gVisor
- Free tier
- Not listed
- 2 vCPU · 4 GiB
- $0.060
Sandbox0Long-running agent sandboxes with durable storage.- Isolation
- gVisor
- Free tier
- Not listed
- 2 vCPU · 4 GiB
- $0.060
SailboxesPersistent Linux VMs for long-horizon AI agents.- Isolation
- Full VM
- Free tier
- $5 credit each month
- 2 vCPU · 4 GiB
- $0.062
Northflank SandboxesMicroVM sandboxes for running untrusted code.- Isolation
- MicroVM
- Free tier
- Not listed
- 2 vCPU · 4 GiB
- $0.067
Prime SandboxesIsolated microVM sandboxes for AI agents and RL.- Isolation
- MicroVM
- Free tier
- Not listed
- 2 vCPU · 4 GiB
- $0.090
Sandbox as a ServiceDedicated virtual machine sandboxes for AI agents.- Isolation
- Full VM
- Free tier
- $5 credit
- 2 vCPU · 4 GiB
- $0.090
Oblien WorkspaceHosted microVM workspaces for AI agents.- Isolation
- Firecracker
- Free tier
- Free tier, no credit card
- 2 vCPU · 4 GiB
- $0.092
AgentBayCloud sandboxes for browser, desktop, mobile and code.- Isolation
- Container
- Free tier
- Free Basic plan
- 2 vCPU · 4 GiB
- $0.099
MorphSnapshot, branch and restore whole machines.- Isolation
- Full VM
- Free tier
- Not listed
- 2 vCPU · 4 GiB
- $0.100
ixCloud VMs with up to 100 vCPUs, billed by usage.- Isolation
- Full VM
- Free tier
- Not listed
- 2 vCPU · 4 GiB
- $0.101
BytePlus AI Cloud Native SandboxServerless container sandboxes for AI task execution.- Isolation
- Container
- Free tier
- Not listed
- 2 vCPU · 4 GiB
- $0.103
exe.devDisposable VMs for AI agents, billed by the second.- Isolation
- Full VM
- Free tier
- 7-day trial with a paid ChatGPT subscription
- 2 vCPU · 4 GiB
- $0.105
IsorunIsolated Linux microVMs from any Docker image.- Isolation
- MicroVM
- Free tier
- $50 credit
- 2 vCPU · 4 GiB
- $0.110
Novita SandboxCloud sandboxes for AI agents to run code and browsers.- Isolation
- Not listed
- Free tier
- $100 credit
- 2 vCPU · 4 GiB
- $0.117
CreateOS SandboxHosted Firecracker microVM sandboxes for AI agents.- Isolation
- Firecracker
- Free tier
- 500 free credits
- 2 vCPU · 4 GiB
- $0.119
CagedIsolated microVM sandboxes that record every agent action.- Isolation
- Firecracker
- Free tier
- Free plan
- 2 vCPU · 4 GiB
- $0.120
DigitalOcean Harness RuntimeManaged microVM sandboxes for AI agents and their code.- Isolation
- Firecracker
- Free tier
- Not listed
- 2 vCPU · 4 GiB
- $0.126
Freestyle VMsFull Linux virtual machines for AI agents.- Isolation
- Full VM
- Free tier
- Free plan
- 2 vCPU · 4 GiB
- $0.132
Docker SandboxesCloud microVM sandboxes for coding agents, run by Docker.- Isolation
- MicroVM
- Free tier
- One-time promotional credit for cloud compute
- 2 vCPU · 4 GiB
- $0.140
Together SandboxIsolated runtime environments for code from AI agents.- Isolation
- Firecracker
- Free tier
- Not listed
- 2 vCPU · 4 GiB
- $0.149
Dedalus MachinesLinux virtual machines for AI agents that sleep when idle.- Isolation
- Full VM
- Free tier
- $20 credit
- 2 vCPU · 4 GiB
- $0.149
boxdPersistent Linux machines for devs and AI agents.- Isolation
- MicroVM
- Free tier
- $30 credit
- 2 vCPU · 4 GiB
- $0.150
Hyperbrowser SandboxesIsolated cloud VMs that run commands for AI agents.- Isolation
- Full VM
- Free tier
- 5,000 credits
- 2 vCPU · 4 GiB
- $0.150
BoxLite CloudHosted microVM boxes for AI agents, with an SDK.- Isolation
- MicroVM
- Free tier
- $100 credit
- 2 vCPU · 4 GiB
- $0.158
Fly.io SpritesPersistent Linux computers that sleep when idle.- Isolation
- MicroVM
- Free tier
- $30 trial credit
- 2 vCPU · 4 GiB
- $0.165
BlaxelSandboxes that pause when idle and resume with state.- Isolation
- MicroVM
- Free tier
- Credit of up to $200
- 2 vCPU · 4 GiB
- $0.166
DaytonaStateful sandboxes that boot from OCI-compliant images.- Isolation
- Container
- Free tier
- $200 credit
- 2 vCPU · 4 GiB
- $0.166
DeclawFirecracker microVM sandboxes for AI agents.- Isolation
- Firecracker
- Free tier
- $100 credit
- 2 vCPU · 4 GiB
- $0.166
E2BOpen-source sandboxes for AI-generated code.- Isolation
- Firecracker
- Free tier
- $100 credit
- 2 vCPU · 4 GiB
- $0.166
HopXFirecracker microVM sandboxes for AI agents.- Isolation
- Firecracker
- Free tier
- $200 credit
- 2 vCPU · 4 GiB
- $0.166
InstaVMHardware-isolated microVMs for AI agent code.- Isolation
- Firecracker
- Free tier
- $50 credit
- 2 vCPU · 4 GiB
- $0.166
Leap0Firecracker microVM sandboxes for AI-generated code.- Isolation
- Firecracker
- Free tier
- Free during public preview
- 2 vCPU · 4 GiB
- $0.166
RuntaIsolated computers where AI agents work and keep state.- Isolation
- Full VM
- Free tier
- $50 credit
- 2 vCPU · 4 GiB
- $0.166
SuperserveFirecracker microVM sandboxes that pause and resume.- Isolation
- Firecracker
- Free tier
- Not listed
- 2 vCPU · 4 GiB
- $0.166
Tenki SandboxDisposable Linux VMs for AI agents, driven by SDK or CLI.- Isolation
- Full VM
- Free tier
- $100 credit
- 2 vCPU · 4 GiB
- $0.166
Thunder SandboxesIsolated, short-lived sandboxes for agents, GPU optional.- Isolation
- Firecracker
- Free tier
- Not listed
- 2 vCPU · 4 GiB
- $0.166
PandaStack SandboxFirecracker microVM sandboxes for AI agents.- Isolation
- Firecracker
- Free tier
- $5.40 / month
- 2 vCPU · 4 GiB
- $0.173
Cua FleetsHosted Linux and Windows sandboxes for computer-use agents.- Isolation
- gVisor
- Free tier
- Not listed
- 2 vCPU · 4 GiB
- $0.179
Cloudflare SandboxContainers at the edge, driven from a Worker.- Isolation
- Firecracker
- Free tier
- None
- 2 vCPU · 4 GiB
- $0.180
LangSmith SandboxesIsolated sandboxes for running agent-generated code.- Isolation
- Firecracker
- Free tier
- 8 LSU a month
- 2 vCPU · 4 GiB
- $0.189
BoxComputeLinux VM sandboxes for AI agents, hosted in Malaysia.- Isolation
- Full VM
- Free tier
- $10 credit
- 2 vCPU · 4 GiB
- $0.200
Tensorlake SandboxesMicroVM sandboxes for AI agents and AI-generated code.- Isolation
- MicroVM
- Free tier
- Free plan, $0 forever
- 2 vCPU · 4 GiB
- $0.200
Upstash BoxIsolated cloud containers that give AI agents a computer.- Isolation
- Container
- Free tier
- 5 CPU hours per month
- 2 vCPU · 4 GiB
- $0.200
Gemini Enterprise Agent Platform Code ExecutionManaged sandboxes that run code for AI agents.- Isolation
- Container
- Free tier
- 50 vCPU-hours and 100 GiB-hours free per month
- 2 vCPU · 4 GiB
- $0.206
Amazon Bedrock AgentCore Code InterpreterManaged code sandboxes for AI agents on AWS.- Isolation
- MicroVM
- Free tier
- Not listed
- 2 vCPU · 4 GiB
- $0.217
Beam SandboxesCloud sandboxes for running AI-generated code.- Isolation
- Container
- Free tier
- Not listed
- 2 vCPU · 4 GiB
- $0.227
ModalServerless compute with sandboxes and GPUs.- Isolation
- gVisor
- Free tier
- $30 / month
- 2 vCPU · 4 GiB
- $0.238
- AWS Lambda MicroVMsServerless microVMs on AWS that suspend when idle.
- Isolation
- Firecracker
- Free tier
- Not listed
- 2 vCPU · 4 GiB
- $0.252
Deno SandboxLinux microVMs for running untrusted and generated code.- Isolation
- Firecracker
- Free tier
- Not listed
- 2 vCPU · 4 GiB
- $0.300
Islo SandboxesPersistent microVM computers for coding agents.- Isolation
- MicroVM
- Free tier
- Credits to start
- 2 vCPU · 4 GiB
- $0.300
RunloopDevboxes built for coding agents.- Isolation
- MicroVM
- Free tier
- $50 credit
- 2 vCPU · 4 GiB
- $0.317
Vercel SandboxIsolated Linux microVMs for running untrusted code.- Isolation
- Firecracker
- Free tier
- 5 CPU-hrs / mo
- 2 vCPU · 4 GiB
- $0.341
Railway SandboxesIsolated Linux VMs you create on demand and destroy.- Isolation
- Full VM
- Free tier
- $5 credit
- 2 vCPU · 4 GiB
- $0.417
Agent SandboxHosted API that runs Python and shell code for AI agents.- Isolation
- Container
- Free tier
- $10 credit
- 2 vCPU · 4 GiB
- Not listed
- Alibaba Cloud Agent SandboxManaged microVM sandboxes for AI agent workloads.
- Isolation
- MicroVM
- Free tier
- Not listed
- 2 vCPU · 4 GiB
- Not listed
Azure Container Apps dynamic sessionsIsolated sandbox sessions for running code on Azure.- Isolation
- Full VM
- Free tier
- Not listed
- 2 vCPU · 4 GiB
- Not listed
- Azure Container Apps SandboxesIsolated microVM sandboxes that start on demand.
- Isolation
- MicroVM
- Free tier
- Not listed
- 2 vCPU · 4 GiB
- Not listed
boxes.devCloud computers for Claude Code and Codex.- Isolation
- Not listed
- Free tier
- 20 free hours
- 2 vCPU · 4 GiB
- Not listed
Containarium CloudHosted Linux boxes for AI agents, reached over SSH.- Isolation
- Container
- Free tier
- Free tier
- 2 vCPU · 4 GiB
- Not listed
CoreWeave SandboxesIsolated environments for running untrusted code.- Isolation
- MicroVM
- Free tier
- Not listed
- 2 vCPU · 4 GiB
- Not listed
Depot Agent SandboxesCloud sandboxes for running Claude Code sessions.- Isolation
- Container
- Free tier
- Not listed
- 2 vCPU · 4 GiB
- Not listed
inis.runIsolated Linux sandboxes for AI-generated code.- Isolation
- Full VM
- Free tier
- Not listed
- 2 vCPU · 4 GiB
- Not listed
MaritimeHosting for persistent AI agents, each in its own micro-VM.- Isolation
- Firecracker
- Free tier
- 3 agents, forever
- 2 vCPU · 4 GiB
- Not listed
microsandbox cloudHosted microVM sandboxes for AI agents and untrusted code.- Isolation
- MicroVM
- Free tier
- Not listed
- 2 vCPU · 4 GiB
- Not listed
Namespace DevboxesDev environments for AI coding agents.- Isolation
- Full VM
- Free tier
- 30-day free trial
- 2 vCPU · 4 GiB
- Not listed
Nebius SandboxesSandboxes for AI agents that branch from any checkpoint.- Isolation
- MicroVM
- Free tier
- Not listed
- 2 vCPU · 4 GiB
- Not listed
OmniRunSandboxes on Firecracker microVMs, self-hosted or managed.- Isolation
- Firecracker
- Free tier
- Not listed
- 2 vCPU · 4 GiB
- Not listed
RemoteHostPersistent, hardware-isolated microVMs for coding agents.- Isolation
- Firecracker
- Free tier
- 7-day trial
- 2 vCPU · 4 GiB
- Not listed
SandockDocker sandboxes with persistent volumes for AI agents.- Isolation
- Container
- Free tier
- None
- 2 vCPU · 4 GiB
- Not listed
Unikraft CloudMicroVM sandboxes that start in under 10 ms.- Isolation
- Firecracker
- Free tier
- Hobby plan, free forever
- 2 vCPU · 4 GiB
- Not listed
VersLinux computers you can branch, checkpoint, and restore.- Isolation
- Full VM
- Free tier
- Starting credit
- 2 vCPU · 4 GiB
- Not listed
Related features
Each feature page lists the providers that have it.