firecracker-sandbox

Upload a binary. Get a server.

MicroVM orchestrator for your VPS with built-in sleep/wake policies, backups, snapshots, HTTPS, custom image, logs and metrics

Virtual machine manager of Frappe Cloud

Bare-metal microVM execution engine in Rust. Sub-5ms snapshot restores, Zero-NIC network isolation, and 30 built-in language toolchains for AI code sandboxes & online judges.

A daemonless microVM sandbox runtime for agents, automation, and untrusted workloads.

A Docker & Firecracker runtime for Apple Silicon Macs, powered by Lima

Cage lets you programmatically create isolated environments ("sandboxes"), run commands inside them, and tear them down — all through a simple REST API.

koto is a microVM-based agent sandbox harness using Firecracker and that has the TUI and gRPC interface you always wanted

CPU feature floor

Secure, isolated sandbox execution on your own infrastructure

Snapshot-optimised Linux guest for Firecracker microVMs. Measured post-restore working set: 1563 pages / 6.1 MiB. Open harnesses, WSL2-relative numbers.

AgentBox SDK. AI sandboxes for company agents

Threat-model-driven backup security blueprint: dual-control authorization, Firecracker-isolated repositories, PQC-ready signing, append-only restic storage. Design research — not a turnkey product.

Cirrocumulus: a secure, tileable mini cloud in Rust. Runs workloads in Firecracker microVMs sandboxed by jailer, managed from the CLI with a live htop-style terminal dashboard.

Execute untrusted code securely in KVM microVMs with Firecracker, packaged as a single Rust binary for self-hosted judge and code execution.