Deno Sandbox
Execution SandboxProprietary · Proprietary (platform); @deno/sandbox SDK is MITManaged only
Deno's managed microVM sandboxes with credential and egress controls.
Deno Sandbox, announced by Ryan Dahl on 3 February 2026, runs lightweight Firecracker microVMs that start in under a second; secrets are never placed in the environment — placeholders are substituted at the outbound host — and network egress is restricted through an allowlist proxy.
Caveat: Managed-only; the platform is proprietary and the SDK is MIT.
Key facts
| Category | Execution Sandbox |
|---|---|
| License | Proprietary (platform); @deno/sandbox SDK is MIT |
| Language | TypeScript (SDK) |
| Self-hosted | No |
| Last verified | 2026-10-04 |
Tools in this category
Daytona
Agent sandboxes with independent kernel per sandbox and sub-90ms snapshot resume.
Open source★ 71,667Archived
Firecracker
AWS's open-source microVM monitor powering Lambda and Fargate.
Open source★ 37,138
gVisor
Google's user-space application kernel for workload isolation, delivered as the runsc OCI runtime.
Open source★ 19,501Caveat