A glossy cube resting on sunlit rock beside still water
boot median < 50ms · 14 regions

Sandboxes fast enough to sit in the request path.

let your agent do sandbox.run("any code") and sandbox.delete(). safe and disposable compute.

< 50ms
median boot
stateful resumes
BYOC
your cloud

Three things we refuse to compromise on

< 50 ms

Instant startup

Snapshot-restore microVMs boot in under 50 milliseconds. No warm pools to pre-provision, no idle fleet to pay for, no first-request penalty when your agent decides to run something.

  • No warm-up, ever
  • Boot on the request path
  • Scale 0 → 10k in seconds
Stateful

Resume exactly where you left off

Pause a sandbox and its memory, processes and filesystem freeze in place. Resume hours later and the shell, the venv, the node_modules and the half-finished build are all still there.

  • Persistent filesystem across sessions
  • Pause / resume in one call
  • Fork a sandbox from any snapshot
BYOC

Bring your own cloud

Deploy the ironbox control plane inside your own AWS, GCP or Azure account. Your data, credentials and sandbox disks never leave your infrastructure, while we manage the orchestration layer.

  • Self-hosted control plane
  • Isolated VPC per tenant
  • SOC 2 ready

6-lines to get a disposable vm

One SDK call gets you a full Linux environment with a shell, a network policy and a writable disk. Pause it when your agent stops thinking, resume it when the user comes back tomorrow — the process tree and files come back with it.

pythonnodebungorustcustom OCI images
sandbox.ts
import { Ironbox } from "ironbox";

const box = await Ironbox.create({ image: "python:3.12" }); // < 50ms

await box.run("pip install pandas && python train.py");
await box.fs.write("/work/notes.md", "checkpoint 1");

await box.pause();                 // memory + disk frozen
const again = await box.resume(box.id);
await again.run("cat /work/notes.md"); // still there

Built for untrusted code

Agent code execution

Give your agent a real shell, package manager and network policy without giving it your infrastructure.

User-submitted test runs

Execute customer code, grade submissions or run CI matrices in disposable, per-tenant environments.

Untrusted-by-default isolation

Hardware-virtualized boundaries per sandbox, with egress rules, CPU and disk quotas you control.

Everything else you need

Bring any image
Define network policies to lock down or break free
Connect MCPs safely
Works on your stack
Can run on your/any cloud account
Warm start
Tenant isolation per enterprise account

Your agent is waiting on a container. Stop that.

10,000 free sandbox-seconds every month. No card, no cluster, no warm-up.