# Deno Sandbox

> Deno Sandbox, announced by Ryan Dahl on 3 February 2026, runs lightweight Firecracker microVMs that start in under a second; secrets are never placed in the environment — placeholders are substituted at the outbound host — and network egress is restricted through an allowlist proxy.

Deno's managed microVM sandboxes with credential and egress controls.

- **Category:** Execution Sandbox
- **License:** Proprietary (platform); @deno/sandbox SDK is MIT
- **Language:** TypeScript (SDK)
- **Self-hosted:** No
- **Last verified:** 2026-10-04

> Caveat: Managed-only; the platform is proprietary and the SDK is MIT.

Source: https://agent.c8.fit/tools/deno-sandbox/