The sandbox market,
mapped to one interface.

Direct Docker Engine adapter. Best for controlled development and dedicated worker pools.

Development and contract testing only. It is not an isolation boundary.

Native adapter uses the Devbox Hypertext Transfer Protocol interface.

Native adapter supports lifecycle, commands, files, and archives. Extended capabilities are discoverable.

Memory persistence, templates, commands, files, and secure network controls.

Container and virtual machine sandboxes with snapshots, volumes, and a toolbox interface.

Container and virtual machine sandboxes with rich resource and networking controls.

Firecracker environments for code generation, previews, and untrusted execution.

Fast virtual machines with standby state, process management, ports, and volumes.

Stateful computers with checkpoints, services, network policy, ports, and a complete programming interface.

Fast Firecracker virtual machines with sessions, configurable egress, resources, and volumes.

Stateful cloud sandboxes for agents, processes, files, ports, persistent storage, and graphics processors.

Worker-integrated containers plus an official bridge for language-neutral access.

Development-focused virtual machines with cloning, hibernation, and live previews.

Durable agent computers with shells, filesystems, pause, and snapshots.

General sandboxes with templates, file operations, previews, and desktop automation.

Secure agent runtime available as a managed service or self-hosted deployment.

Developer computers designed for agents, builds, tests, and remote access.

Managed or customer-cloud sandboxes built on Northflank workload primitives.

Low-level fast-launching machines. The driver owns command and file transport.

A Kubernetes Special Interest Group project that defines declarative sandbox resources.

Open source control plane, protocol, and runtimes for Docker, Kubernetes, code, browsers, and desktops.

Policy-governed private runtime for autonomous agents with filesystem and network controls.

Embedded, rootless virtual machine runtime with language libraries and protected secret substitution.

All-in-one Docker environment combining a browser, shell, files, code editor, notebooks, and desktop access.

Open source durable agent sessions with workspaces, network policy, credential injection, and orchestration.

Open source Firecracker virtual machine forking from copy-on-write snapshots.

In-process sandbox command available to Cloud Run workloads. Currently a preview service.

JavaScript and TypeScript isolate deployments for customer-authored code.

Persistent virtual machines with secure shell and Hypertext Transfer Protocol programming interfaces.

Programmable development computers with branching and optional remote desktops.

Session-oriented hosted environments with code execution and file transfer.

Data-local execution with a shared high-performance filesystem.

Managed code interpreter sessions rather than general-purpose shell sandboxes.

Hyper-V isolated interpreter sessions with code and file endpoints.

Python-focused interpreter sessions with file uploads and rich outputs.

Remote Ubuntu, browser, and Windows desktops for computer-use agents.

Managed browser sessions and web automation rather than general-purpose shell sandboxes.

Isolated browser virtual machines with an application interface and Model Context Protocol server.