awesome-sandbox

**A Curated Guide to Code Sandboxing Solutions**

This document provides a comprehensive, curated list and analysis of modern code sandboxing solutions. It is designed to help developers, architects, and engineering leaders navigate the complex landscape of secure code execution, from foundational technologies to full-fledged platforms.

Table of Contents

• 1. Why Secure Code Execution Matters Now
• 2. Sandboxing Technologies
  • Sandboxing Technologies Feature Matrix
  • 2.1. Micro-Virtual Machines (MicroVMs): Hardware-Level Isolation
    • Firecracker
    • libkrun
  • 2.2. Application Kernels: Intercepting the System Call
    • gVisor
    • nsjail
  • 2.3. Language Runtimes: Lightweight, High-Speed Isolation
    • WebAssembly (WASM)
    • V8 Isolates
  • 2.4. Containerization: Namespace-Based Isolation
    • Docker/OCI Containers
• 3. Feature Matrix: At-a-Glance Comparison
• 4. In-Depth Platform Profiles
  • 4.1. e2b: The AI Agent Sandbox Runtime
  • 4.2. Daytona: Secure & Elastic Infrastructure for AI Code
  • 4.3. microsandbox: Self-Hosted MicroVMs for Untrusted Code
  • 4.4. WebContainers: Browser-Native Development Runtime

...