Explore your options
Alternatives to Daytona Sandboxes
Browse other tools in sandboxes and execution. Follow their links to take a closer look.
The directory
Other tools to explore
Listed A–Z. Hosted and self-hosted options share one listing. About the labels
Agent Sandbox (Kubernetes)
Kubernetes SIG AppsAn open-source Kubernetes controller for managing stateful agent sandboxes, with lifecycle controls, persistent storage, and warm pools.
Self-hostedOpen sourceApache-2.0Details & sources
A sandbox orchestrator for Kubernetes. Configure an isolation runtime such as gVisor or Kata Containers; the controller does not supply that isolation itself.
Install and operate the controllers and sandbox workloads on a Kubernetes cluster you control.
Source repository ↗ · Kubernetes Sandbox CRD, controllers, and clients. Isolation is provided by separately configured runtimes such as gVisor or Kata Containers.
Reviewed
Agent37 Sandboxes
Agent37Persistent cloud sandboxes for running commands, hosting services, and managing agent workspaces through an instance API.
HostedDetails & sources
Reviewed
AgentComputer
AgentComputerCloud computers for agents with programmatic command execution, file operations, and machine lifecycle controls.
HostedDetails & sources
Reviewed
Alibaba Cloud AgentBay
AlibabaCloud execution environments for agent code, browsers, desktops, and mobile applications, controlled through SDKs and MCP.
HostedDetails & sources
Reviewed
Managed all-in-one sandboxes combining code execution, filesystem access, and browser automation for agent applications.
HostedDetails & sources
Reviewed
Amazon Bedrock AgentCore Code Interpreter
Amazon Web ServicesManaged sandbox environments for agents to execute code, analyze data, and work with files through Amazon Bedrock AgentCore.
HostedDetails & sources
Requires an AWS account and IAM permissions. This listing covers Code Interpreter, rather than the full AgentCore platform.
Reviewed
Amika Rigs
Amika RigsRemote machines for agent execution, with command and file access across managed compute and machines connected from your own infrastructure.
HostedSelf-hosted data planeDetails & sources
Free and Team signup is waitlisted; Enterprise access requires contacting Amika.
Run the data plane on your own compute, connected to Amika’s managed control plane.
Reviewed
Archil Sandboxes
ArchilIsolated Linux sandboxes for running agent commands and working with files through Python and TypeScript SDKs.
HostedDetails & sources
Reviewed
Arker
ArkerCloud virtual machines for agent execution, with public compute pools and private pools for customer infrastructure.
HostedSelf-hosted data planeDetails & sources
Early access requires contacting Arker. Private infrastructure access is restricted to partner companies.
Private pools run the data plane in customer infrastructure, connected to the Arker control plane.
Reviewed
Managed code interpreter sessions for running untrusted code and exchanging files through a REST API, with Hyper-V isolation.
HostedDetails & sources
This listing covers code interpreter sessions. Requires an Azure session pool and Microsoft Entra authentication.
Reviewed
Azure Container Apps Sandboxes
MicrosoftManaged sandbox groups for agent workloads, with sandbox lifecycle, command execution, snapshots, and suspend/resume controls.
HostedDetails & sources
The sandbox-groups product is distinct from Azure Container Apps Dynamic Sessions.
Reviewed
Baponi Sandboxes
BaponiRemote sandboxes for agent command execution and file operations, with an SDK integration for agent frameworks.
HostedDetails & sources
Reviewed
Beam Sandboxes
BeamCloud sandbox containers with process, filesystem, networking, and snapshot controls for agent workloads.
HostedDetails & sources
Reviewed
Blaxel Sandboxes
BlaxelManaged sandbox VMs for running agent-generated code, working with files, and retaining environment state between sessions.
HostedDetails & sources
Reviewed
Boat Sandboxes
BoatManaged Linux machines for running commands, moving files, and managing persistent agent workspaces through SDKs and a CLI.
HostedDetails & sources
Reviewed
boxd
boxdCloud Linux virtual machines with command execution, filesystem access, and lifecycle controls through SDKs, an API, and a CLI.
HostedSelf-hostedDetails & sources
Commercial annual license for the boxd binary on your own KVM-capable Linux hosts.
Reviewed
Brimble Sandboxes
BrimbleRemote execution environments for shell commands and code, with files, snapshots, and pause/resume support.
HostedDetails & sources
Reviewed
Buddy Sandboxes
BuddyCloud Linux sandboxes for agent code execution, with files, persistent state, and lifecycle controls through SDKs, an API, and a CLI.
HostedDetails & sources
Reviewed
Celesto Computers
Celesto ComputersManaged Linux computers with API access to command execution, files, and machine lifecycle controls.
HostedDetails & sources
Reviewed
Cloudflare Sandboxes
CloudflareIsolated environments accessed from Cloudflare Workers for executing generated code and workloads that should run separately from the application.
HostedDetails & sources
Requires a Cloudflare Workers setup. The sandbox SDK source does not establish that the Cloudflare service can be self-hosted.
Reviewed
Coasty Machines
Coasty MachinesManaged computers with APIs for terminal commands, files, browser operations, and direct desktop actions.
HostedDetails & sources
This listing covers the Machines API; Coasty also offers separate model and autonomous-task APIs.
Reviewed
Collimate Sandboxes
CollimateCloud microVMs for command execution, with persistent files and processes, forks, and suspend/resume controls.
HostedDetails & sources
Reviewed
CreateOS Sandboxes
CreateOSManaged microVM sandboxes for command execution, files, snapshots, and persistent agent workspaces.
HostedDetails & sources
Reviewed
Declaw Sandboxes
DeclawIsolated Linux sandboxes for agent code execution and file operations, managed through an application SDK.
HostedDetails & sources
Reviewed
Dedalus Machines
Dedalus LabsCloud virtual machines for agent workloads, with command execution, SSH access, and lifecycle management through an API and CLI.
HostedDetails & sources
Reviewed
Deno Sandbox
DenoLinux microVMs on Deno Deploy for running untrusted code, executing commands, and managing files from an SDK or API.
HostedDetails & sources
The reviewed documentation describes pre-release concurrency limits; check current limits before adopting.
Reviewed
Dexto Sandboxes
DextoCloud execution workspaces with APIs for running commands, managing files, and controlling sandbox lifecycle.
HostedDetails & sources
Docker Sandboxes
DockerIsolated environments for AI coding agents, available on your own machine or Docker-managed cloud compute.
HostedSelf-hostedDetails & sources
Local and cloud sandboxes have separate credentials, network policies, and lifecycle controls.
Local sandboxes run on your own machine through the sbx CLI. This is not a self-hosted deployment of Docker’s cloud control plane.
Reviewed
E2B
E2BSandbox infrastructure that gives agents isolated Linux environments for running code, working with files, and pausing or resuming sessions.
Details & sources
The public runtime includes the sandbox backend; running it requires operating its infrastructure.
Source repository ↗ · E2B Runtime backend. Hosted service terms are separate.
Reviewed
Freestyle VMs
FreestyleCloud Linux virtual machines for agent workloads, with command execution, file access, persistent workspaces, and pause/resume controls.
HostedDetails & sources
Reviewed
Google Agent Platform Sandbox
Google CloudManaged sandboxes for executing agent-generated code, with stateful sessions and lifecycle controls through Google Cloud SDKs.
HostedDetails & sources
The Code Execution environment has no network access and does not support installing custom libraries. It can be used with any agent framework or model.
Reviewed
Hugging Face Sandboxes
Hugging FaceCloud machines built on Hugging Face Jobs for running commands and transferring files from Python or the CLI.
HostedDetails & sources
Experimental API. Dedicated sandboxes are intended for mutually untrusted workloads; shared pools are for workloads within the same trust boundary. Reviewed documentation is from the main branch and requires installing the library from source.
Reviewed
Instabox
InstaboxCloud machines for agent workspaces, with CLI, SDK, and API access to commands, files, SSH, and suspend/resume controls.
HostedDetails & sources
Reviewed
Instavm Code Execution
Instavm Code ExecutionCloud sandboxes for stateful Python and shell execution, with file operations through an application SDK.
HostedDetails & sources
Reviewed
Isle
IsleCloud CAD desktops for agents, with Python SDK access to desktop actions, application sessions, and code execution.
HostedDetails & sources
Islo Sandboxes
IsloCloud sandboxes with command execution, files, port forwarding, and configurable lifecycle policies through an API, SDK, or CLI.
HostedDetails & sources
Reviewed
Isorun Sandboxes
IsorunCloud microVMs for agent command execution, with persistent filesystem state and hibernate/resume lifecycle controls.
HostedDetails & sources
Reviewed
Kedge Workspaces
Kedge WorkspacesPersistent cloud development machines for agent work, controlled over SSH with workspace creation, command execution, and lifecycle operations.
HostedDetails & sources
Public preview with a limited free trial. Listed workspaces are distinct from Kedge’s application hosting service.
Reviewed
Koyeb Sandboxes
KoyebEphemeral execution environments on Koyeb, with SDKs for creating sandboxes, running processes, and accessing files.
HostedDetails & sources
Reviewed
LangSmith Sandboxes
LangChainIsolated execution environments for agents to run commands, access files, and expose services through LangSmith.
HostedSelf-hostedDetails & sources
The sandbox execution product is listed separately from LangSmith’s observability and evaluation tools.
Requires LangSmith Enterprise and a self-hosted Kubernetes deployment with dedicated KVM-capable nodes and sandbox storage.
Reviewed
Leap0 Sandboxes
Leap0Cloud sandboxes with APIs for commands, files, interpreter sessions, SSH, snapshots, and desktop control.
HostedDetails & sources
Lizard Sandboxes
LizardRemote execution environments for agent code, with SDK and CLI access to sandbox lifecycle and commands.
HostedDetails & sources
The documentation describes both Firecracker and container runtimes; isolation depends on the selected runtime.
Reviewed
Machine0
Machine0Persistent cloud machines for agent workspaces, with command-line access to machine provisioning and lifecycle controls.
HostedDetails & sources
Reviewed
Microsandbox
Microsandbox projectBetaA local microVM runtime for running untrusted agent workloads and code through a CLI or an embedded SDK.
Self-hostedOpen sourceApache-2.0Details & sources
The project describes itself as beta software. It requires a supported virtualization environment; consult the platform requirements in its documentation.
Source repository ↗ · Microsandbox local microVM runtime.
Reviewed
Miosa Sandboxes
MiosaCloud microVM sandboxes with API access to command execution, files, previews, forks, and pause/resume controls.
HostedDetails & sources
Reviewed
Modal Sandboxes
ModalProgrammatically created sandbox environments on Modal for executing commands and running untrusted or generated code.
HostedDetails & sources
This listing covers Sandboxes rather than Modal inference or model-serving products.
Reviewed
Morph Cloud
MorphCloud virtual machines for agent workspaces, with programmatic command execution, snapshots, and instance lifecycle controls.
HostedDetails & sources
Reviewed
Mosaic Sandboxes
MosaicManaged Linux sandboxes for running agent commands and managing files through an API, SDK, or CLI.
HostedDetails & sources
Reviewed
Nebius Token Factory Sandboxes
NebiusBetaManaged execution environments for agent code and file operations, with programmatic sandbox lifecycle controls.
HostedDetails & sources
Nodus Compute Sandboxes
Nodus ComputeManaged Linux execution environments for agent commands and files, controlled through a CLI or MCP tools.
HostedDetails & sources
Reviewed
Northflank Sandboxes
NorthflankSandbox compute for agents on Northflank’s cloud or customer infrastructure, with APIs for deployment and lifecycle management.
HostedSelf-hosted data planeDetails & sources
On customer infrastructure, sandbox isolation requires a configured runtime class and compatible nodes.
BYOC runs the data plane in your cloud account. Deploying the control plane in your own VPC or data center is a separate Enterprise option.
Reviewed
Novita Sandbox
Novita AIManaged execution environments for agents to run code, install dependencies, use browsers, and preserve state between sessions.
HostedDetails & sources
Reviewed
OmniRun
OmniRunManaged Firecracker sandboxes for command execution, interpreter sessions, and file access through a sandbox API.
HostedDetails & sources
Managed access is arranged per client or team. The announced runtime source release was not publicly available at review, so open-source and self-hosted availability are not established.
Reviewed
OpenComputer Sandbox
OpenComputerSelf-hosted sandbox infrastructure with a control plane and Linux VM workers for commands, files, snapshots, and agent workspaces.
Self-hostedOpen sourceApache-2.0Details & sources
Operator deployment requires cloud resources, worker images, Postgres, Redis, and object storage. Current hosted sandbox availability was not established separately from the agent platform.
Source repository ↗ · Sandbox control plane, workers, and guest agent; see repository license for covered code.
Reviewed
OpenHands Remote Agent Server
OpenHands Remote Agent ServerSelf-hosted containerized execution servers with APIs for remote workspaces, shell commands, and file transfer.
Self-hostedOpen sourceMITDetails & sources
This listing covers the remote execution server and workspace APIs, rather than the finished OpenHands coding application.
Source repository ↗ · Software Agent SDK, remote agent server, and workspace packages.
Reviewed
OpenPond Sandbox Compute
OpenPond Sandbox ComputeCloud sandboxes for agent code execution and file operations, with SDK-based lifecycle management.
HostedDetails & sources
Reviewed
OpenSandbox
AlibabaSelf-hosted sandbox infrastructure for agent code execution, command and file operations, with local Docker and Kubernetes deployment options.
Self-hostedOpen sourceApache-2.0Details & sources
Requires operating the sandbox server and its container or Kubernetes runtime.
Source repository ↗ · OpenSandbox server, runtimes, and project components.
Reviewed
Orgo Computers
Orgo ComputersCloud computers for agents with APIs for desktop control, shell commands, files, and computer lifecycle management.
HostedDetails & sources
Reviewed
Orkestr Sandboxes
OrkestrManaged Linux sandboxes with API and SDK access to command execution, files, and lifecycle controls.
HostedDetails & sources
Reviewed
PandaStack
PandaStackMicroVM sandboxes for agent execution, with SDKs and a CLI for commands, files, snapshots, and forks.
Details & sources
Source repository ↗ · PandaStack control plane, scheduler, agents, and sandbox hosts.
Reviewed
Paperpod
PaperpodHosted Linux containers for agent workspaces, with APIs and CLI commands for remote execution and persistent files.
HostedDetails & sources
Reviewed
PPIO Sandbox
PPIOManaged agent sandboxes with isolated runtimes for code, files, and browser tasks, plus templates and session persistence.
HostedDetails & sources
Reviewed
Prime Intellect Sandboxes
Prime IntellectIsolated microVM workspaces for agent coding, evaluations, and experiments, with custom images and filesystem checkpoints.
HostedDetails & sources
Reviewed
Railway Sandboxes
RailwayManaged Linux sandboxes for agent command execution, with SDK controls for files, checkpoints, and sandbox lifecycle.
HostedDetails & sources
Reviewed
Rivet agentOS
Rivet agentOSAn embeddable execution runtime with isolated filesystems, processes, terminals, and language tools, also available as managed durable VMs.
Details & sources
Uses an in-process runtime with V8 and WebAssembly isolation; it is not a full Linux microVM.
Source repository ↗ · agentOS execution runtime; separate Rivet platform components may have their own licenses.
Reviewed
Runloop Devboxes
RunloopManaged sandbox development environments for software agents, with reusable environment templates and snapshot-based session persistence.
HostedDetails & sources
Reviewed
Runta Runtimes
Runta RuntimesCloud execution environments for agents, with APIs, SDKs, and a CLI for commands, files, and runtime lifecycle management.
HostedDetails & sources
Reviewed
Runtime Sandboxes
RuntimeCloud Linux sandboxes with APIs, SDKs, CLI commands, and MCP tools for execution, files, and lifecycle management.
HostedDetails & sources
Reviewed
Sailboxes
Sail ResearchCloud virtual machines for agent workloads, with SDK access to commands, files, checkpoints, and persistent execution state.
HostedDetails & sources
Reviewed
Sandbox as a Service
Sandbox as a ServiceManaged sandbox environments with a REST API for creating machines, executing commands, and managing their lifecycle.
HostedDetails & sources
Reviewed
Sandbox0
Sandbox0Hosted agent sandboxes with persistent writable filesystems, command execution, and checkpoint-based pause and resume.
HostedDetails & sources
Self-hosting support ended on October 16, 2026. The historical Apache-2.0 runtime is archived; the current product is closed source, and BYOC is planned but unavailable.
Reviewed
ScitiX Agent Sandbox
ScitiX AgentSelf-hosted Kubernetes sandbox infrastructure with warm pools, an E2B-compatible API, and command-line platform management.
Self-hostedOpen sourceApache-2.0Details & sources
Source repository ↗ · Kubernetes sandbox controller, API, and related platform components.
Reviewed
SeaCloud Sandbox
SeaCloudManaged sandbox environments for agent code execution and file operations, controlled through a Python SDK.
HostedDetails & sources
Reviewed
ShardFlux Workspaces
ShardFlux WorkspacesCloud Linux workspaces for agent execution, with SDK access to commands, files, and workspace lifecycle controls.
HostedDetails & sources
Reviewed
Shellbox
ShellboxPersistent cloud microVMs for agent workspaces, controlled through SSH commands for machine creation, execution, and files.
HostedDetails & sources
Reviewed
smol machines
smol machinesLinux microVMs for local or managed cloud execution, with SDK, API, and CLI controls for commands, storage, and machine lifecycle.
Details & sources
Run the smolvm engine locally or on your own machines; the managed cloud control plane is separate.
Source repository ↗ · smolvm local microVM engine and CLI; this license does not establish an open-source cloud control plane.
Reviewed
Solari Sandboxes
SolariCloud execution environments for commands and stateful code, with SDK access to files, snapshots, and forks.
HostedDetails & sources
Shared and dedicated isolation options have different boundaries; shared sandboxes run within a shared machine.
Reviewed
Sprites
Fly.ioPersistent Linux environments for agents, with command execution, filesystem checkpoints, and automatic idle handling.
HostedDetails & sources
Reviewed
StateSet Sandboxes
StateSetManaged container environments for agent code execution, with API and SDK controls for sandbox lifecycle and files.
HostedDetails & sources
Reviewed
Superserve Sandbox
SuperserveFirecracker sandbox infrastructure with a managed API and a deployable control plane for running agent code.
Details & sources
Production use requires a commercial agreement under OCVSAL 1.0.
Source repository ↗ · Sandbox control plane and VM runtime; production use requires a commercial agreement.
Reviewed
Tama
TamaCloud machines for agent execution, including GPU workloads, with APIs, SDKs, and a CLI for commands, SSH, snapshots, and forks.
HostedDetails & sources
Reviewed
Tangle Sandboxes
TangleCloud Linux sandboxes with SDK access to code execution, processes, files, terminals, and lifecycle management.
HostedDetails & sources
Reviewed
Tencent Cloud Agent Sandbox
Tencent CloudManaged code, browser, and custom-image sandbox environments for agent applications.
HostedDetails & sources
Reviewed
Tencent CubeSandbox
Tencent CloudSelf-hosted microVM sandbox infrastructure with an E2B-compatible API, snapshots, and single-node or clustered deployment.
Self-hostedOpen sourceApache-2.0Details & sources
Source repository ↗ · CubeSandbox runtime and control plane; bundled third-party components retain their listed licenses.
Reviewed
Tenki Sandbox
TenkiManaged Linux sessions for agent execution, with SDK access to commands, snapshots, and persistent volumes.
HostedDetails & sources
Reviewed
Tensorlake Sandboxes
TensorlakeIsolated sandbox environments for agent harnesses, tool execution, coding workflows, and builds, with suspend and resume support.
HostedSelf-hosted data planeDetails & sources
BYOC runs the sandbox data plane in your AWS account; Tensorlake Cloud remains the control plane. The Sandbox Proxy can be vendor-run or self-hosted.
Reviewed
Together Code Sandbox
Together AIHosted execution environments created from Docker-based snapshots for agent tool calls, generated code, and evaluation workloads.
HostedDetails & sources
Access to the together-sandbox SDK and CLI must be enabled for your organization; contact Together to request access.
Reviewed
UCloud Sandbox
UCloudCloud execution environments for agent code and tools, with programmatic sandbox creation and command execution.
HostedDetails & sources
Reviewed
Unikraft Cloud Sandboxes
Unikraft CloudMicroVM sandboxes for running commands and transferring files through a JavaScript SDK, available in managed cloud or private deployments.
HostedSelf-hostedDetails & sources
Commercial on-premises deployment of the Unikraft Cloud platform requires contacting the vendor.
Reviewed
Upstash Box
Upstash BoxCloud boxes for agent workspaces, with SDK access to commands, files, and optional coding-agent execution.
HostedDetails & sources
Reviewed
Vercel Sandbox
VercelManaged Linux microVMs for running agent-generated code, executing commands, managing files, and serving application previews.
HostedDetails & sources
Reviewed
Volcengine veFaaS Cloud Sandbox
VolcengineManaged container sandboxes for agent code, browsers, and computer-use workloads, with API, SDK, and MCP access.
HostedDetails & sources
Reviewed
YepCode Run
YepCode RunManaged execution of agent-generated JavaScript and Python, with SDK integrations for running code and working with files in sandboxed environments.
HostedDetails & sources
Reviewed
No tools match those filters.
Try a different search or see all deployment options.
Looking for Daytona Sandboxes itself? Visit its website ↗