Run untrusted code with Vercel Sandbox, now generally available
By Steven Van ·
Vercel Sandbox exits preview with GA status, sub-second microVM starts, and an open-sourced CLI and SDK for JavaScript and Python.
Vercel Sandbox is now generally available, giving developers on-demand Linux microVMs for running untrusted or agent-generated code. Vercel is also open-sourcing the Sandbox CLI and SDK.
Sandbox runs on Hive, the Firecracker-based compute platform that already powers Vercel's deployments, over 2.7 million a day. Each sandbox is an isolated microVM with its own filesystem, network and process space, with sudo access and package managers, so code runs the way it would on a regular Linux machine.
- Sub-second starts, aimed at spinning up thousands of sandboxes per task
- Snapshots to restore a complex environment instead of rebuilding it
- Fluid compute with Active CPU pricing
The SDK ships for JavaScript and TypeScript as @vercel/sandbox, and for Python as vercel.sandbox. Read the announcement for setup details.