Execution Sandbox

Agent sandboxes with independent kernel per sandbox and sub-90ms snapshot resume.

AWS's open-source microVM monitor powering Lambda and Fargate.

Google's user-space application kernel for workload isolation, delivered as the runsc OCI runtime.

Policy-governed agent runtime that blocks all outbound network traffic by default.

Open-source Firecracker microVM sandboxes for AI agent code execution.

Tencent Cloud's open-source microVM agent sandbox, E2B-SDK compatible.

OCI-compatible VM isolation that can drive QEMU, Cloud Hypervisor or Firecracker.

Self-hosted, local-first microVM sandboxes with OCI image compatibility.

KVM-based Rust VMM built on rust-vmm, dual-licensed Apache-2.0 / MIT.

High-density runtime that multiplexes many stateful agents onto few Kubernetes workers.

Firecracker microVMs with suspend/resume across 18+ regions.

Ephemeral Firecracker microVMs on Vercel, one per sandbox.

Deno's managed microVM sandboxes with credential and egress controls.

A k3s-derived Kubernetes distribution, repositioned in 2026 as an agent sandbox matrix.

Managed container-based sandboxes on Modal, isolated with gVisor.