Vercel, an AI cloud company, launched a two-week competition through HackerOne offering a share of $1 million to hackers who can escape its Firecracker microVM or defeat the sandbox firewall, with rew…
AI coding agents can now write, run, and deploy code autonomously, yet most startups fail to isolate them from production systems, risking catastrophic errors. Sandboxing, which runs agent code in iso…
Pipe, a language-embedded agent sandbox, distinguishes itself by placing sandbox control inside the programming language itself, with ratchet semantics that prevent privilege escalation, structural ga…
HolyClaude, an open-source tool for Claude Code, reached 2.4k stars on GitHub, and its developer is now hosting it as a managed service on Fly.io, giving each user a dedicated Linux VM with pre-instal…
AWS has launched Lambda MicroVMs, a new service that provides virtual machine-level isolation for running untrusted code, such as AI-generated code, in stateful execution environments. Powered by Fire…
Docker Sandboxes is a local developer-workstation tool that mounts the user's filesystem and runs microVMs on their own hardware, while E2B and Cloudflare Sandbox SDK are cloud-hosted, API-driven serv…
Agentic coding teams are wasting effort on synchronous workflows that turn engineers into approval clerks, according to a series post by an unnamed engineering team that built an autonomous coding age…
Wanno, a new platform, lets developers deploy any app in seconds by dragging and dropping a folder, .zip, or GitHub repo, or building from scratch with AI, with automatic stack detection, a managed Po…
Docker Inc. launched Docker Sandboxes, a new product that isolates AI coding agents in microVMs with their own kernels and private Docker daemons, rather than containers, to make bypass-mode agents sa…
Docker announced general availability of Docker Sandboxes on January 30, 2026, a microVM-based runtime for AI coding agents that wraps tools like Claude Code in disposable environments with a credenti…
A developer from Temps evaluated E2B alternatives for self-hosted AI sandboxes in 2026, highlighting Modal, Daytona, Morph Cloud, and Firecracker/gVisor as key options. The analysis centers on two que…
New sandboxing technologies such as micro-VMs and WASM-based runtimes aim to replace static containers, allowing AI agents to perform complex tasks with reduced security risks. These ephemeral environ…
Vercel Sandbox now defaults to persistent microVM sandboxes, a shift from the ephemeral model, signaling that stateful isolation is the new standard for running LLM-generated code. The service, which …
Moonshot AI and KVCache.ai released AgentENV, a distributed sandbox runtime for AI agents that claims incremental snapshots in under 100 milliseconds, but a detailed analysis shows the complete fork-t…
A new tutorial by Ji-ho Choi demonstrates how to sandbox untrusted LLM-generated code using gVisor containers and Firecracker microVMs, providing a local execution environment for AI agents. The setup…
Amazon Web Services has unveiled a new architecture built on Amazon Bedrock AgentCore and the Model Context Protocol that lets factory managers ask natural language questions and receive personalized,…
Moonshot AI open-sourced AgentENV, a Rust-based distributed runtime for AI agent environments, now powering Kimi K3's agentic RL training. The platform uses Firecracker micro-VMs for isolation, achiev…
Moonshot AI's Kimi team and kvcache-ai have open-sourced AgentENV (AENV), a distributed platform for running agent environments at scale that powers agentic reinforcement learning (RL) training for Ki…
AgentENV (AENV), a platform for running agent environments at scale powering agentic RL training for Kimi K3, launches with support for snapshot-backed environments that boot or resume in under 50 ms …
Pullrun, a new open-source project, lets users run the same OCI image as either a container or a Firecracker microVM by toggling a single flag, reviving an old capability with improved ergonomics just…