firecracker-sandbox

Upload a binary. Get a server.

MicroVM orchestrator for your VPS with built-in sleep/wake policies, backups, snapshots, HTTPS, custom image, logs and metrics

Bare-metal microVM execution engine in Rust. Sub-5ms snapshot restores, Zero-NIC network isolation, and 30 built-in language toolchains for AI code sandboxes & online judges.

Cage lets you programmatically create isolated environments ("sandboxes"), run commands inside them, and tear them down — all through a simple REST API.

A Docker & Firecracker runtime for Apple Silicon Macs, powered by Lima

koto is a microVM-based agent sandbox harness using Firecracker and that has the TUI and gRPC interface you always wanted

CPU feature floor

AgentBox SDK. AI sandboxes for company agents

Snapshot-optimised Linux guest for Firecracker microVMs. Measured post-restore working set: 1563 pages / 6.1 MiB. Open harnesses, WSL2-relative numbers.

Secure, isolated sandbox execution on your own infrastructure

Execute untrusted code securely in KVM microVMs with Firecracker, packaged as a single Rust binary for self-hosted judge and code execution.

A daemonless microVM sandbox runtime for agents, automation, and untrusted workloads.