Live now · EU-hosted gVisor sandboxes

Run untrusted code
in secure sandboxes

Execute AI-generated code in isolated, ephemeral gVisor sandboxes on our EU hardware. One API call, per-second billing, persistent sessions. The safe way to let agents run code.

Free tier with usage credits · No card required to start

bash
~ms
cold-start reap
gVisor
kernel isolation
per-second
usage billing
EU
GDPR-friendly

From code to result in one call

No infra to manage. Send code, get output, we bill the seconds.

01

Send code

POST your snippet and language to /v1/run, or open a persistent session.

02

We isolate & run

A fresh gVisor pod spins up on a dedicated node — no shared kernel, deny-all egress.

03

Get the result

Poll the run, receive a signed webhook, or read stdout live from a session.

Everything agents need to run code

Built for products that generate code and have to execute it safely.

🛡️

gVisor isolation

User-space kernel, dropped capabilities, read-only rootfs, no service-account token. Red-teamed.

🧩

Persistent sessions

Keep a sandbox alive across calls — exec, read/write files, an interactive console in your dashboard.

⏱️

Per-second billing

Pay for the exact vCPU + RAM seconds you use. No idle charges, metered to Stripe.

🌍

EU-hosted · GDPR

Runs on our own EU hardware. Your users' code never leaves the region.

🪝

Signed webhooks

Get an HMAC-signed run.* event the moment execution finishes. SSRF-guarded.

📦

Python & Node SDKs

Thin, typed SDKs plus a clean REST API and OpenAPI docs. Integrate in minutes.

Isolation first

Untrusted code, contained by design

Every run gets its own ephemeral gVisor pod on a dedicated node. We red-team our own platform: host escape, cloud-metadata, the Kubernetes API and data exfiltration are all blocked at the kernel and network layers.

  • gVisor (runsc) user-space kernel — no shared host kernel
  • Non-root, all capabilities dropped, read-only filesystem
  • Deny-all egress + allow-listed proxy; locked-down DNS
  • No Kubernetes token in the sandbox — zero cluster access
# inside a QuickTane sandbox
$ cat /var/run/secrets/kubernetes.io/…/token
cat: No such file or directory
$ curl 169.254.169.254/latest/meta-data/
curl: (7) Failed to connect — blocked
$ id
uid=1000 gid=1000 (no caps, ro rootfs)

Usage-first pricing

Start free. Pay for the seconds you run. No surprises.

Free

$0/mo

Usage credits included. Kick the tyres.

  • 3 concurrent sandboxes
  • Up to 5 min per run
  • 1 live session
  • Community support
Get started

Pro

Popular
$49/mo

Plus per-second usage. For production workloads.

  • 25 concurrent sandboxes
  • Up to 60 min per run
  • 10 live sessions
  • Email support
Get started

See full pricing →

Ship code execution today

Create an API key and run your first sandbox in under a minute.