Anmelden
Docker Sandboxes logo

Docker Sandboxes

Aktiv

Docker's microVM sandboxes for running AI coding agents isolated from your host

Website besuchenVergleichen
Bedingt

Docker Sandboxes is a free way to let coding agents such as Claude Code, Codex or Gemini run with full sudo inside a microVM with its own kernel, Docker Engine, deny-by-default networking and proxy-injected credentials. Conditional on patching and mount discipline: releases from 0.28.0 until the 0.42.0 fix carry a critical macOS host-file escape, and the default mount is read-write, so the agent edits your working tree in place. Right for developers running agents unattended.

KI-gestützt

Isolation runtime that hosts third-party coding agents in microVMs; it runs no model itself.

Ist es das Richtige für dich?

Gut für

  • Giving an agent full sudo and its own Docker Engine without exposing the host kernel
  • Keeping API keys out of the agent: the host proxy injects auth headers and raw credentials never enter the VM
  • Reviewing agent work before it touches your tree: `--clone` mounts the repo read-only and the agent works on a private clone
  • Running many agents one way: eleven are supported, including Claude Code, Codex, Copilot, Cursor, Devin, Gemini and OpenCode

Nicht geeignet für

  • Unpatched installs: versions 0.28.0 to before 0.42.0 on macOS let guest code read or modify arbitrary host files
  • Protecting the working tree under the default mount: changes to Git hooks and build scripts reach the host immediately
  • Isolating local MCP servers, which run on the host with host permissions
  • Intel Macs, Windows 10 or Windows on Arm, or Ubuntu before 24.04: it needs Apple silicon on macOS 14+, Windows 11 on a 64-bit Intel or AMD processor, or Ubuntu 24.04+ with KVM

Unsere Erfahrung

We haven't tested Docker Sandboxes ourselves. This profile is based on public documentation, user reviews, and community feedback.

Preise

Freemium
sbx CLI$0
  • Free, including for commercial work
  • Docker account sign-in required
Cloud sandboxesPay-as-you-go
  • Run on Docker-managed cloud infrastructure
  • Model-provider charges are separate
  • Rate not read on the overview page
Organization governanceNot published
  • Centralized network, filesystem and MCP policies
  • Separate paid subscription
Alle Preise ansehen

Noch keine Urteilsänderungen

Die Uhr läuft ab dem ersten Tag. Änderungen erscheinen hier, sobald sich unser Urteil weiterentwickelt.

Quellen

Prüfprotokoll

  • Profil· Keine Änderungen

    Automatisierter Agent

  • Status· Keine Änderungen

    Automatisierter Agent

  • Preise· Aktualisiert

    Automatisierter Agent

    Overview page now states cloud sandboxes use a pay-as-you-go subscription with model-provider charges separate; added a Cloud sandboxes tier (rate not published on the page). sbx CLI and local compute free including commercial use, and org governance on a separate paid subscription, unchanged.

Wie wir bewerten

Wollen Sie das in Ihrem Unternehmen laufen haben?

Wir haben dieses Tool getestet und bauen täglich mit Tools wie diesem. Sagen Sie uns den Ablauf, wir richten es ein, integrieren es und übergeben es funktionsfähig.

Sagen Sie uns, was Sie brauchen (wird in einem neuen Tab geöffnet)Sehen Sie, was wir bauen

Das Gespräch läuft auf Gnosari, einem der Tools in diesem Verzeichnis. Ein echtes Gespräch, kein Verkaufsskript.