Best Sandbox & Execution Top 20
Top 20 most popular open-source Sandbox & Execution projects, ranked by GitHub Stars.
DeerFlow
80.1k StarsAn open-source long-horizon SuperAgent harness by ByteDance that researches, codes, and creates with sandboxes, memories, tools, skills, subagents and message gateway for complex tasks.
Daytona
72.0k StarsDaytona provides secure development-environment infrastructure for coding agents and automation workflows, serving as a runtime base for remote execution tasks.
Firecracker
36.1k StarsLightweight microVM runtime by AWS, designed for containers and functions.
CUA
21.4k StarsCUA provides open-source infrastructure for Computer-Use Agents, including sandboxes, SDKs, and benchmarks to train and evaluate AI agents that control full desktops (macOS, Linux, Windows).
Context Mode
19.9k StarsContext Mode is a context window optimization tool for AI coding agents that sandboxes tool output for 98% context reduction across 12 major platforms.
Sandboxie Plus
19.2k StarsSandboxie-plus is a Windows sandbox execution tool that isolates untrusted programs, used by agents to run untrusted code safely.
gVisor
19.1k StarsGoogle's user-space kernel sandbox that intercepts container syscalls.
keploy
18.4k StarsKeploy is an open-source sandbox platform for API and E2E testing that records and replays real traffic inside an isolated environment to generate test cases.
OpenSandbox
13.9k StarsOpenSandbox is an open-source, secure, fast, and extensible sandbox runtime for AI agents, developed by Alibaba.
E2B
13.4k StarsE2B provides secure cloud sandboxes for AI agents, supporting code execution, file operations, and isolated compute as an execution layer for coding and automation workflows.
CubeSandbox
11.2k StarsA high-performance, secure sandbox service for AI agents by Tencent Cloud, built on RustVMM and KVM with hardware-level isolation, sub-60ms cold start, <5MB memory overhead, and E2B SDK compatibility.
Databend
9.4k StarsA Data Agent Ready Warehouse unifying Analytics, Search, AI, and Python Sandbox in one system. Runs on your S3 with built-in vector search, full-text search, and Python execution for AI-powered data analysis.
Omnigent
8.9k StarsOpen-source AI agent framework and meta-orchestrator that unifies Claude Code, Codex, Cursor, Pi, and custom agents with policy enforcement, sandboxing, and real-time collaboration.
Kata Containers
8.5k StarsLightweight VM sandboxes with a container interface from Kata Containers.
flue
7.9k StarsFlue is an Astro-native toolkit for building AI agent applications, providing streaming, tool use, and structured output helpers for Astro endpoints.
Microsandbox
7.6k StarsSecure, local, cross-platform and programmable sandboxes for AI agents. Provides strict resource isolation using microVM technology.
Steel Browser
7.5k StarsSteel Browser is an open-source browser sandbox purpose-built for AI agents and applications. It provides a full browser API with session management, proxy integration, and built-in anti-detection, enabling web automation without infrastructure headaches.
Sandcastle
7.4k StarsA TypeScript tool for orchestrating sandboxed coding agents with secure execution environments powered by sandcastle.run.
Agent Governance Toolkit
6.0k StarsMicrosoft's AI Agent Governance Toolkit providing policy enforcement, zero-trust identity, execution sandboxing, and reliability engineering for autonomous AI agents. Covers 10/10 OWASP Agentic Top 10.
Agent Sandbox
5.7k StarsAll-in-One Sandbox for AI Agents that combines Browser, Shell, File, MCP and VSCode Server in a single Docker container, providing a secure isolated execution environment for agents.
Related Articles
Sandboxing Code Execution in AI Agents: From Docker to microVMs, a Decision Matrix
A side-by-side comparison of five sandbox technologies, weighing latency, security, and ops cost.
Sandboxing AI Agents: Isolation Strategies for Safe Code Execution
Comparing container, WebAssembly, and process-level isolation approaches, with practical code for safely executing agent-generated code.
Anti-Bot and Browser Fingerprinting: Modern Web Scraping Strategies
A systematic deep dive into modern web scraping anti-bot defenses: HTTP layer (curl_cffi for TLS fingerprint), browser layer (Playwright plus stealth), behavior layer (human behavior simulation), covering Cloudflare bypass, proxy IP rotation, Scrapling selector self-healing, and legal compliance boundaries.