AgentScout / Tasks / Writing code / Sandboxes and secure execution

Sandboxes and secure execution tools for coding agents

Isolated sandboxes where agents can run code and tools away from your machine and data. Of the 391 tools on our writing code page, 29 fit this narrower job. By pricing: 25 open source, 1 source-available, 2 free or freemium, 1 pricing on the maker's site. The most-starred open repos here are Deer Flow (83,959 stars), Context Mode (30,192 stars), NVIDIA OpenShell (16,156 stars). Most come from the sandboxes & code execution (17), coding (9), research (1) categories.

Updated

Deer Flow logo

Deer Flow

researchOpen source

ByteDance's open-source long-horizon agent harness that researches, codes and creates using sandboxes, memory and sub-agents.

Added

Context Mode logo

Context Mode

codingSource-available + cloud

Context window optimizer for coding agents that sandboxes tool output and persists session memory.

Added

NVIDIA OpenShell logo

NVIDIA OpenShell

sandboxes & code executionOpen source

Sandboxed runtime for autonomous agents with declarative YAML policies on file, network and credential access.

Added

OpenSandbox logo

OpenSandbox

sandboxes & code executionOpen source

Secure, fast sandbox runtime for AI agents to run code.

Added

CubeSandbox logo

CubeSandbox

sandboxes & code executionOpen source

Lightweight, concurrent sandbox for running AI agent code securely.

Added

Open SWE logo

Open SWE

NewcodingOpen source

LangChain's asynchronous coding agent that takes work from GitHub issues, Slack or Linear, implements it in an isolated sandbox and opens a pull request.

Added

microsandbox logo

microsandbox

sandboxes & code executionOpen source

Local-first microVM runtime for running untrusted agent code safely.

Added

Fragments logo

Fragments

Newapp buildersOpen source

E2B's open-source Next.js template for AI-generated apps, like Claude Artifacts or v0, with generated code run in secure E2B sandboxes.

Added

AIO Sandbox logo

AIO Sandbox

Newsandboxes & code executionOpen source

All-in-one Docker sandbox for AI agents that combines a browser, shell, files, MCP, VS Code Server and Jupyter in one container.

Added

agentOS logo

agentOS

Newsandboxes & code executionOpen source + cloud

A lightweight operating system for agents from Rivet that runs coding agents and their tools inside fast WebAssembly sandboxes with a file system, processes and networking, so you can spin up thousands cheaply.

Added

nono logo

nono

sandboxes & code executionOpen source

Zero-trust sandboxing for agent runtimes.

Added

Judge0 logo

Judge0

sandboxes & code executionOpen source + cloud

Sandboxed code execution system for running untrusted code from people and AI.

Added

ArcBox logo

ArcBox

sandboxes & code executionOpen source

Runs AI agents on isolated machines with their own kernel, filesystem and network.

Added

HolmesGPT logo

HolmesGPT

codingOpen source

CNCF sandbox SRE agent that investigates alerts and incidents.

Added

forkd logo

forkd

Newsandboxes & code executionOpen source

MicroVM sandbox runtime for AI agent fan-out that forks KVM-isolated child VMs from a warm snapshot in milliseconds.

Added

Zeroboot logo

Zeroboot

Newsandboxes & code executionOpen source + cloud

VM sandboxes for running agent code that start in under a millisecond by forking a warm snapshot with copy-on-write memory.

Added

Mantis logo

Mantis

Newsecurity & governanceOpen source

Google's toolkit for AI coding agents to autonomously find, reproduce and patch software vulnerabilities in isolated environments.

Added

Agent Safehouse logo

Agent Safehouse

Newsandboxes & code executionOpen source

macOS sandbox for local coding agents that limits file and integration access with deny-first policy profiles.

Added

Perplexity SPACE logo

Perplexity SPACE

Newsandboxes & code executionOpen source

Perplexity's open-source sandbox platform that runs each agent task in its own Firecracker microVM, with credentials and network access controlled from outside.

Added

Lody logo

Lody

NewcodingOpen source + cloud

A team workspace for running AI coding agents in parallel in isolated Git worktrees, with live diff review, GitHub integration and access from phone or desktop.

Added

Cloudflare Sandbox SDK logo

Cloudflare Sandbox SDK

Newsandboxes & code executionOpen source + cloud

SDK for running isolated code sandboxes on Cloudflare's network, so agents can execute commands and files safely from a Worker.

Added

Pydantic Deep Agents logo

Pydantic Deep Agents

NewcodingOpen source

Self-hosted terminal AI assistant and Python framework on Pydantic AI, with tool calling, sandboxed execution, multi-agent teams and checkpoints.

Added

Tensorlake logo

Tensorlake

Newsandboxes & code executionOpen source + cloud

Serverless runtime that gives agents MicroVM sandboxes and durable orchestration for long-running background jobs.

Added

ThinkRail logo

ThinkRail

NewcodingOpen source

JetBrains' lightweight agentic IDE that pairs you with the pi coding agent, with isolated git-worktree workspaces, editor tabs, terminals and diffs.

Added

Cloudroom logo

Cloudroom

NewcodingOpen source + cloud

Cloudroom runs Claude Code, Codex, Pi and other coding agents in the cloud, each in its own isolated sandbox on its own Git branch, using your own model logins; the Rust core is open source to self-host, and a desktop app manages local and cloud agents.

Added

Mirror CLI logo

Mirror CLI

NewcodingSee site

Reflection AI's terminal coding agent that reads code, edits files and runs commands in isolated git worktrees, using the open-weight Beam model by default.

Added

Conductor logo

Conductor

NewcodingFreemium

Runs a team of coding agents such as Claude Code and Codex in isolated cloud sandboxes, with Mac and iPhone apps to review and merge their work.

Added

E2B logo

E2B

sandboxes & code executionOpen source + cloud

Secure cloud sandboxes for running agent-generated code.

Added

Modal logo

Modal

sandboxes & code executionFreemium

Serverless compute and sandboxes for AI workloads.

Added

GitHub repos (26)

RepoGitHub starsLicenceLast push
Deer Flow ↗83,959MIT2026-10-21
Context Mode ↗30,192Elastic License 2.0 (source-available)2026-10-21
NVIDIA OpenShell ↗16,156Apache License 2.02026-10-21
OpenSandbox ↗15,907Apache License 2.02026-10-21
CubeSandbox ↗12,960Apache-2.0 (third-party components under their own licences)2026-10-21
Open SWE ↗11,034MIT2026-10-21
microsandbox ↗8,717Apache License 2.02026-10-19
Fragments ↗6,393Apache License 2.02026-10-13
AIO Sandbox ↗6,205Apache License 2.02026-09-14
agentOS ↗4,808—2026-10-21
nono ↗4,535Apache License 2.02026-10-21
Judge0 ↗4,482GNU GPL v3.02026-10-18
ArcBox ↗4,240Apache License 2.02026-10-20
HolmesGPT ↗3,616Apache License 2.02026-10-21
forkd ↗2,919—2026-09-14

Top 15 of 26 by stars. Stars and licence come from each repo, checked when the listing was last verified.

FAQ

What are the best AI tools for writing code focused on sandboxes and secure execution?

We list 29. The first three by GitHub stars and featured status are Deer Flow: ByteDance's open-source long-horizon agent harness that researches, codes and creates using sandboxes, memory and sub-agents.; Context Mode: Context window optimizer for coding agents that sandboxes tool output and persists session memory.; NVIDIA OpenShell: Sandboxed runtime for autonomous agents with declarative YAML policies on file, network and credential access.

Are there free or open-source options?

Yes: 25 open source, 1 source-available, 2 free or freemium, 1 pricing on the maker's site. Pricing is as each maker states it.

More from writing code

Tools are grouped by what each says it does. Missing one? Submit it free.

Get the best new AI agents, weekly

One short email with new tools, launches and what's worth trying. Free, unsubscribe anytime.