Free Sandboxes & Runtimes — open-source & self-hostable
Isolated code-execution runtimes for agents
Scores rate free-tier value on a 1–10 scale. How scores work →
-
Deno Sandboxes & Runtimes 8.4 A modern runtime for JavaScript and TypeScript. 107.4k★1.5k/90d25 devs/90d -
Daytona Sandboxes & Runtimes 8.0 Daytona is a Secure and Elastic Infrastructure for Running AI-Generated Code 72.3k★506/90d21 devs/90d -
Coder Sandboxes & Runtimes 7.7 Secure environments for developers and their agents 13.7k★1.6k/90d27 devs/90d -
Firecracker Sandboxes & Runtimes 7.6 Secure and fast microVMs for serverless computing. 35.3k★338/90d11 devs/90d -
gVisor Sandboxes & Runtimes 7.6 Application Kernel for Containers 18.7k★486/90d21 devs/90d -
Wasmtime Sandboxes & Runtimes 7.6 A lightweight WebAssembly runtime that is fast, secure, and standards-compliant 18.3k★553/90d23 devs/90d -
Lima Sandboxes & Runtimes 7.4 Linux virtual machines, with a focus on running containers 21.4k★350/90d14 devs/90d -
Kata Containers Sandboxes & Runtimes 7.4 Kata Containers is an open source project and community working to build a standard implementation of lightweight Virtual Machines (VMs) that feel and perform like containers, but provide the workload isolation and security advantages of VMs. https://katacontainers.io/ 8.2k★1.2k/90d12 devs/90d -
Pyodide Sandboxes & Runtimes 7.1 Pyodide is a Python distribution for the browser and Node.js based on WebAssembly 14.7k★113/90d12 devs/90d -
OpenSandbox Sandboxes & Runtimes 7.1 Secure, Fast, and Extensible Sandbox runtime for AI agents. 11.8k★780/90d18 devs/90d -
microsandbox Sandboxes & Runtimes 6.7 🧱 easy and fast microVMs for running untrusted workloads 6.8k★329/90d9 devs/90d -
Agent Sandbox (Kubernetes) Sandboxes & Runtimes 6.6 agent-sandbox enables easy management of isolated, stateful, singleton workloads, ideal for use cases like AI agent runtimes. 3.1k★288/90d32 devs/90d -
libkrun Sandboxes & Runtimes 6.6 A dynamic library providing Virtualization-based process isolation capabilities 2.4k★253/90d12 devs/90d -
Hyperlight Sandboxes & Runtimes 6.5 Hyperlight is a lightweight Virtual Machine Manager (VMM) designed to be embedded within applications. It enables safe execution of untrusted code within micro virtual machines with very low latency and minimal overhead. 4.5k★199/90d8 devs/90d -
nono Sandboxes & Runtimes 6.5 Sandbox any AI agent in seconds - zero setup, zero latency. 2.9k★971/90d15 devs/90d -
Anthropic Sandbox Runtime Sandboxes & Runtimes 6.4 A lightweight sandboxing tool for enforcing filesystem and network restrictions on arbitrary processes at the OS level, without requiring a container. 4.6k★282/90d5 devs/90d -
Modal Sandboxes & Runtimes 6.3 SDK libraries for Modal 486★394/90d25 devs/90d -
BoxLite Sandboxes & Runtimes 6.0 Compute substrate for AI agents: lightweight enough to live on your laptop, elastic enough to scale into the cloud and unleash unlimited resources. 2.1k★248/90d6 devs/90d -
AIO Sandbox Sandboxes & Runtimes 5.9 All-in-One Sandbox for AI Agents that combines Browser, Shell, File, MCP and VSCode Server in a single Docker container. 5.3k★13/90d8 devs/90d -
nsjail Sandboxes & Runtimes 5.9 A lightweight process isolation tool that utilizes Linux namespaces, cgroups, rlimits and seccomp-bpf syscall filters, leveraging the Kafel BPF language for enhanced security. 4k★18/90d6 devs/90d -
just-bash Sandboxes & Runtimes 5.9 Bash for agents: a virtual, in-memory bash interpreter and filesystem that runs an agent's shell tools without a container. 3.9k★52/90d12 devs/90d -
E2B Code Interpreter SDK Sandboxes & Runtimes 5.9 Python & JS/TS SDK for running AI-generated code/code interpreting in your AI app 2.4k★45/90d7 devs/90d -
Bubblewrap Sandboxes & Runtimes 5.8 Low-level unprivileged sandboxing tool used by Flatpak and similar projects 7.8k★17/90d3 devs/90d -
matchlock Sandboxes & Runtimes 5.0 Matchlock secures AI agent workloads with a Linux-based sandbox. 602★45/90d6 devs/90d -
LLM Sandbox Sandboxes & Runtimes 4.8 Lightweight and portable LLM sandbox runtime (code interpreter) Python library. 1.1k★12/90d2 devs/90d -
DevPod Sandboxes & Runtimes 4.5 Codespaces but open-source, client-only and unopinionated: Works with any IDE and lets you use any cloud, kubernetes or just localhost docker. 15k★0/90d0 devs/90d -
go-microvm Sandboxes & Runtimes 4.4 Go framework for running OCI images as microVMs with libkrun 13★100/90d4 devs/90d -
Jupyter Kernel Gateway Sandboxes & Runtimes 3.2 Jupyter Kernel Gateway 561★0/90d0 devs/90d -
LangChain Sandbox Sandboxes & Runtimes 3.2 Safely run untrusted Python code using Pyodide and Deno 241★0/90d0 devs/90d -
code-sandbox-mcp Sandboxes & Runtimes 2.7 Lightweight self-hosted STDIO MCP server that lets LLM agents safely execute code snippets inside Docker containers. 199★0/90d0 devs/90d -
Freestyle Sandboxes & Runtimes 2.6 Managed agent-scale sandbox infrastructure giving each agent a full Linux KVM VM with Git-backed filesystems and GitHub sync. GitHub -
Riza Sandboxes & Runtimes 2.2 Isolated code interpreter API for securely executing LLM-generated Python, JS, Ruby, and PHP, with a self-hostable Docker image and MCP server. 12★0/90d0 devs/90d