Alibaba OpenSandbox

opensandbox-group/OpenSandbox

General-purpose sandbox platform for AI agents (8.7K+ stars, March 2026) with multi-language SDKs (Python, Java, TypeScript, Go, C#), unified APIs across Docker/Kubernetes runtimes, and support for secure container runtimes (gVisor, Kata Containers, Firecracker). Covers coding agents, GUI agents, agent evaluation, and RL training in a single abstraction layer — the most runtime-flexible sandbox op

Python Apache-2.0

View on GitHub → Find it in the atlas

Install

uvx opensandbox-server init-config ~/.sandbox.toml --example docker

Repository reader

Explore before you clone

Read the project’s README, skills and supporting Markdown here. Rendered view is shown first; source is one click away when you need the exact text.

Fetched from GitHub
Open on GitHub
Loading the project’s README…

Public files are loaded on demand from the repository. The atlas does not copy or modify them.

Screenshot

Screenshot or social card for Alibaba OpenSandbox
The project's own screenshot, fetched from source rather than copied into this repository.

Platform support

Derived from the project's own README, install route, CI configuration and release assets — not from running it.
PlatformRuns hereOn what evidence
WindowsLikelyInferred from the language or runtime. Nothing in the project says so.
WSL2LikelyInferred from the language or runtime. Nothing in the project says so.
macOSLikelyInferred from the language or runtime. Nothing in the project says so.
LinuxLikelyInferred from the language or runtime. Nothing in the project says so.
DockerYesStated in the project's own README, install route, CI config or release assets.

Where it came from

Named by 2 of the 39 lists the atlas merges, independently of each other.

How it is classified

One topic, no harnesses. Each link is a prerendered page of everything else in that slice.

Sandbox, Security & Governance

Related in Sandbox, Security & Governance

Closest first — projects that plug into the same harnesses, then the ones the most lists agreed on.

  • Brood Boxstacklok/brood-boxRun AI coding agents (Claude Code, Codex, OpenCode) inside hardware-isolated microVMs with snapshot isolation, egress control, and MCP authorization
  • NeMo GuardrailsNVIDIA-NeMo/GuardrailsNVIDIA's programmable guardrails toolkit: define input, dialog, retrieval, execution, and output rails that intercept the agent loop at five…
  • Cordumcordum-io/cordumCordum (cordum.io) is a platform-only control plane for autonomous AI Agents and external workers. It uses NATS for the bus, Redis for state and…
  • e2be2b-dev/E2BFirecracker microVM sandboxes purpose-built for agent tool loops: ~150ms cold start, Python/JS SDKs, open source. The clearest reference…
  • Agentic Radarsplx-ai/agentic-radarOpen-source CLI security scanner for agentic workflows. Scans your workflow’s source code, detects vulnerabilities, and generates an interactive…
  • CubeSandboxTencentCloud/CubeSandboxTencent Cloud's production-validated microVM sandbox for AI agents: sub-60ms cold start via snapshot cloning, <5MB per-instance overhead, and true…
  • GarakNVIDIA/garakThe "Nmap for LLMs." A vulnerability scanner that probes models for hallucination, data leakage, and prompt injection susceptibilities
  • Guardrails AIguardrails-ai/guardrailsGuardrails is a Python framework for building reliable AI applications, offering Input/Output Guards to detect and mitigate risks, along with…