Sandboxes for AI agents to run code (2026)

Sandboxes and isolated runtimes where agents can run code and tools away from your machine and data. Here are the top 25 of 61 from the AgentScout directory.

Updated October 21, 2026

How we picked and ranked: tools are matched by category, the pricing each maker states and what each tool says it does. They are ranked by GitHub stars as recorded on each listing (link checks 2026-10-21); tools without a tracked repo follow, by listing maturity. No paid placements.

1. 

   1. Deer Flow

   researchOpen source★ 83,959 GitHub stars

   ByteDance's open-source long-horizon agent harness that researches, codes and creates using sandboxes, memory and sub-agents.

   Pricing (as stated): Open source · Mature

2. 

   2. Context Mode

   codingSource-available + cloud★ 30,192 GitHub stars

   Context window optimizer for coding agents that sandboxes tool output and persists session memory.

   Pricing (as stated): Source-available + cloud · Mature

3. 

   3. Cua

   browser/computer useOpen source + cloud★ 29,966 GitHub stars

   Open-source infrastructure for computer-use agents: sandboxes, drivers across operating systems and benchmarks.

   Pricing (as stated): Open source + cloud · Mature

4. 

   4. ego lite

   browser/computer useFreemium★ 17,562 GitHub stars

   Free macOS browser where Claude Code or Codex run automation tasks in their own isolated Spaces next to your tabs, reusing your logged-in sessions through an agent skill.

   Pricing (as stated): Freemium · Mature

5. 

   5. NVIDIA OpenShell

   sandboxes & code executionOpen source★ 16,156 GitHub stars

   Sandboxed runtime for autonomous agents with declarative YAML policies on file, network and credential access.

   Pricing (as stated): Open source (Apache 2.0) · Active; part of newly announced Open Agent Safety Platform

6. 

   6. OpenSandbox

   sandboxes & code executionOpen source★ 15,907 GitHub stars

   Secure, fast sandbox runtime for AI agents to run code.

   Pricing (as stated): Open source · Mature

7. 

   7. CubeSandbox

   sandboxes & code executionOpen source★ 12,960 GitHub stars

   Lightweight, concurrent sandbox for running AI agent code securely.

   Pricing (as stated): Open source · Mature

8. 

   8. Open SWE

   codingOpen source★ 11,034 GitHub stars

   LangChain's asynchronous coding agent that takes work from GitHub issues, Slack or Linear, implements it in an isolated sandbox and opens a pull request.

   Pricing (as stated): Open source · Mature

9. 

   9. microsandbox

   sandboxes & code executionOpen source★ 8,717 GitHub stars

   Local-first microVM runtime for running untrusted agent code safely.

   Pricing (as stated): Open source · Mature

10. 

    10. Steel

    browser/computer useOpen source + cloud★ 7,821 GitHub stars

    Open-source browser API and sandbox for AI agents to control web browsers at scale.

    Pricing (as stated): Open source + cloud · Mature

11. 

    11. smolvm

    sandboxes & code executionOpen source★ 6,746 GitHub stars

    Portable, branchable virtual machine for running agents safely on your computer.

    Pricing (as stated): Open source · Mature

12. 

    12. Agent Governance Toolkit

    security & governanceOpen source★ 6,435 GitHub stars

    Microsoft toolkit for policy enforcement, identity and sandboxing for AI agents.

    Pricing (as stated): Open source · Mature

13. 

    13. Fragments

    app buildersOpen source★ 6,393 GitHub stars

    E2B's open-source Next.js template for AI-generated apps, like Claude Artifacts or v0, with generated code run in secure E2B sandboxes.

    Pricing (as stated): Free and open source (Apache-2.0); needs an E2B API key and a model provider key · Mature

14. 

    14. AIO Sandbox

    sandboxes & code executionOpen source★ 6,205 GitHub stars

    All-in-one Docker sandbox for AI agents that combines a browser, shell, files, MCP, VS Code Server and Jupyter in one container.

    Pricing (as stated): Free and open source (Apache-2.0) · Mature

15. 

    15. agentOS

    sandboxes & code executionOpen source + cloud★ 4,808 GitHub stars

    A lightweight operating system for agents from Rivet that runs coding agents and their tools inside fast WebAssembly sandboxes with a file system, processes and networking, so you can spin up thousands cheaply.

    Pricing (as stated): Free and open source; managed hosting through Rivet Cloud. · Active

16. 

    16. Rakazo

    personal agentsOpen source★ 4,713 GitHub stars

    Self-hosted personal AI agent and persistent teammate for web, desktop, iPhone and Android, with your own choice of model and computer sandbox.

    Pricing (as stated): Open source · Active

17. 

    17. nono

    sandboxes & code executionOpen source★ 4,535 GitHub stars

    Zero-trust sandboxing for agent runtimes.

    Pricing (as stated): Open source · Active

18. 

    18. Judge0

    sandboxes & code executionOpen source + cloud★ 4,482 GitHub stars

    Sandboxed code execution system for running untrusted code from people and AI.

    Pricing (as stated): Open source + cloud · Active

19. 

    19. Agent Sandbox (Kubernetes)

    sandboxes & code executionOpen source★ 4,328 GitHub stars

    A Kubernetes project that adds a Sandbox resource for running isolated, stateful agent workloads such as code execution and browsers, with warm pools and fast startup on your own cluster.

    Pricing (as stated): Open source · Active

20. 

    20. ArcBox

    sandboxes & code executionOpen source★ 4,240 GitHub stars

    Runs AI agents on isolated machines with their own kernel, filesystem and network.

    Pricing (as stated): Open source · Active

21. 

    21. HolmesGPT

    codingOpen source★ 3,616 GitHub stars

    CNCF sandbox SRE agent that investigates alerts and incidents.

    Pricing (as stated): Open source · Active

22. 

    22. OneCLI

    agent infraOpen source★ 3,576 GitHub stars

    Sandboxed agent harness for teams with secure credential handling.

    Pricing (as stated): Open source · Active

23. 

    23. Omnara

    agent infraOpen source + cloud★ 2,938 GitHub stars

    Open-source managed agent platform, a self-hostable alternative to Claude Managed Agents and the OpenAI Agents API, with tools, secrets and sandboxes.

    Pricing (as stated): Open source + cloud · Active

24. 

    24. forkd

    sandboxes & code executionOpen source★ 2,919 GitHub stars

    MicroVM sandbox runtime for AI agent fan-out that forks KVM-isolated child VMs from a warm snapshot in milliseconds.

    Pricing (as stated): Open source · Active

25. 

    25. Moltis

    personal agentsOpen source★ 2,890 GitHub stars

    Secure personal agent server in Rust with sandboxed execution.

    Pricing (as stated): Open source · Active

FAQ

What are the best AI code sandboxes?

Ranked by tracked GitHub stars, the top AI code sandboxes in our directory are Deer Flow, Context Mode, Cua, ego lite, NVIDIA OpenShell. Stars measure popularity, not fit, so compare a few against your own task.

How many AI code sandboxes does AgentScout list?

61 tools match. This page shows the top 25. Pricing mix on this page: Open source (18), Open source + cloud (5), Source-available + cloud (1), Freemium (1).

How much do these tools cost?

Pricing is what each maker states on their site. Open-source tools are free to self-host but may need a paid model API key or offer paid cloud plans; freemium tools have a free plan with limits. Check each official site.

Where can I see every tool for running code safely?

Our task page lists all 61 tools we match to running code safely.

Related: All tools for running code safely · sandboxes & code execution (22) · coding (9) · browser/computer use (5) · MCP servers (5)

By role: For developers · For DevOps and SRE engineers · For security engineers · For startup CTOs

All popular searches · AI agents by role · Free tools

Best-of lists: Cursor alternatives · All best lists

Related categories: Sandboxes & code execution · Coding · Browser/computer use

Facts come from our directory listings; pricing is as each maker states it and can change. Check official sites before you choose.