Upload a binary. Get a server.
-
Updated
Sep 7, 2026 - TypeScript
Upload a binary. Get a server.
Bare-metal microVM execution engine in Rust. Sub-5ms snapshot restores, Zero-NIC network isolation, and 30 built-in language toolchains for AI code sandboxes & online judges.
Cage lets you programmatically create isolated environments ("sandboxes"), run commands inside them, and tear them down — all through a simple REST API.
Threat-model-driven backup security blueprint: dual-control authorization, Firecracker-isolated repositories, PQC-ready signing, append-only restic storage. Design research — not a turnkey product.
CPU feature floor
AgentBox SDK. AI sandboxes for company agents
Secure, isolated sandbox execution on your own infrastructure
Snapshot-optimised Linux guest for Firecracker microVMs. Measured post-restore working set: 1563 pages / 6.1 MiB. Open harnesses, WSL2-relative numbers.
Execute untrusted code securely in KVM microVMs with Firecracker, packaged as a single Rust binary for self-hosted judge and code execution.
A daemonless microVM sandbox runtime for agents, automation, and untrusted workloads.
To associate your repository with the firecracker-sandbox topic, visit your repo's landing page and select "manage topics."