# gVisor

> gVisor is Google's Apache-2.0 sandbox that implements a user-space application kernel (Sentry plus Gofer) and ships as the runsc OCI runtime; it is neither a hypervisor nor a syscall filter, and is used by Google Cloud Run and GKE Sandbox.

Google's user-space application kernel for workload isolation, delivered as the runsc OCI runtime.

- **Category:** Execution Sandbox
- **License:** Apache-2.0
- **Language:** Go
- **Self-hosted:** Yes
- **GitHub stars:** 19501 (2026-10-04)
- **Repository:** https://github.com/google/gvisor
- **Last verified:** 2026-10-04

> Caveat: The commonly quoted '200-500ms cold start' has no official published figure; observed numbers range widely (roughly 100ms to multiple seconds) depending on platform and configuration.

Source: https://agent.c8.fit/tools/gvisor/