superradcompany/microsandbox

🧱 easy, fast, programmable and local-first microVM runtime and library

What it solves

Microsandbox provides a secure way to run untrusted workloads—such as AI agents, user-submitted code, plugins, and automation scripts—locally without risking the host system. It replaces traditional containers with hardware-level isolation using tiny virtual machines (microVMs) that boot almost instantly.

How it works

It utilizes microVMs to create isolated environments that are OCI-compatible, meaning they can run standard container images from registries like Docker Hub. The system allows for "forking" live sandboxes to create independent copies of a running state and taking snapshots to save and restore execution states later. It can be embedded directly into applications via SDKs for TypeScript, Rust, Python, and Go, removing the need for a long-running daemon or setup server.

Who it’s for

Developers building AI agents that need a safe place to execute code, DevOps engineers setting up disposable CI/CD jobs, and anyone needing to run potentially dangerous scrapers or plugins in a locked-down environment.

Highlights

  • Hardware Isolation: Uses microVMs for stronger security than standard containers.
  • Instant Startup: Average boot times under 100 milliseconds.
  • State Management: Ability to fork live sandboxes and restore from snapshots.
  • OCI Compatible: Runs standard Docker/OCI images.
  • Embeddable: SDKs allow spawning VMs directly from code without a background daemon.
  • Cross-Platform: Supports Linux, macOS (Apple Silicon), and Windows.

Related

  • Project
    smol-machines/smolvm

    smolvm is an open‑source micro‑VM runtime that lets AI agents run in fast, isolated VMs. It supports branchable checkpoints, portable `.smolmachine` bundles, and SDKs for Python, Node, and Rust, enabling safe sandboxing and reproducible state for AI workloads.

  • Dispatch
    Docker Sandboxes for AI Agents

    Docker Sandboxes provide isolated microVM environments for AI coding agents to execute commands and install packages safely without risking the host system.

  • Project
    opensandbox-group/OpenSandbox

    OpenSandbox provides isolated, secure environments on your own infrastructure for AI agents to execute code, run commands, and operate browsers or desktops.

  • Project
    e2b-dev/runtime

    An open-source runtime for AI agents that provides hardware-isolated Firecracker microVMs with instant snapshot-based boot, pause, and resume capabilities.

  • Project
    TencentCloud/CubeSandbox

    A high-performance, secure sandbox service for AI agents that provides hardware-isolated MicroVMs with sub-60ms startup times and E2B SDK compatibility.