AI · alternatives · 2026
24 alternatives to Deno Sandbox
The safest, simplest way to run untrusted code.
Below are 24 products that do a similar job, ranked by how close each is in meaning and then by launch-day votes.
- 1
A tiny "sandbox" to run untrusted code 🏖️. Contribute to craigmulligan/sandy development by creating an account on GitHub.
2020 · github.com · its alternatives →
- 2
I'm excited to introduce Zerobox, a cross-platform, single binary process sandboxing CLI written in Rust. It uses the sandboxing crates from the OpenAI Codex repo and adds additional functionalities like secret injection, SDK, etc. Watch the demo: https://www.youtube.com/watch?v=wZiPm9BOPCg Zerobox follows the same sandboxing policy as Deno which is deny by default. The only operation that the command can run is reading files, all writes and network I/O are blocked by default. No VMs, no Docker, no remote servers. Want to block reads to /etc? zerobox…
Mar 2026 · github.com · its alternatives →
- 3
- 4
YepCode▲157Hey HN, We’re excited to introduce YepCode Run, a serverless runtime and SDK for executing code in secure sandboxes. Built on top of YepCode (https://yepcode.io), it allows you to execute code without any setup or installation. Perfect for: * Running AI-generated code – Securely in a sandbox environment, enabling fully autonomous AI agents. * Package Exploration – Try npm or PyPI packages without installing them locally. * Code Sharing – Easily share runnable code examples with others. * Quick Prototyping – Test snippets and algorithms on the fly. Just write or paste your code, and…
2022 · yepcode.io · its alternatives →
- 5
Drop: a rootless Linux sandbox for developers. It isolates coding agents and third-party packages while preserving your work environment.
Sep 2026 · droprun.sh · its alternatives →
- 6
A Rust crate for containing memory leaks and fragmentation - brannondorsey/mem-isolate
2025 · github.com · its alternatives →
- 7
Hi everyone, I built a runtime to isolate untrusted code using wasm sandboxes. Basically, it protects your host system from problems that untrusted code can cause. We’ve had a great discussion about sandboxing in Python lately that elaborates a bit more on the problem [1]. In TypeScript, wasm integration is even more natural thanks to the close proximity between both ecosystems. The core is built in Rust. On top of that, I use WASI 0.2 via wasmtime and the component model, along with custom SDKs that keep things as idiomatic as possible. For example, in Python we have a simple decorator:…
Feb 2026 · github.com · its alternatives →
- 8
Shuru is a lightweight sandbox that spins up Linux VMs on macOS using Apple's Virtualization.framework. Boots in about a second on Apple Silicon, and everything is ephemeral by default. There's a checkpoint system for when you do want to persist state, and sandboxes run without network access unless you explicitly allow it. Single Rust binary, no dependencies. Built it for sandboxing AI agent code execution, but it works well for anything where you need a disposable Linux environment.
Feb 2026 · shuru.run · its alternatives →
- 9
Allow developers to extend your product with custom code
2023 · deno.com · its alternatives →
- 10
- 11
HiddenVM — Use any desktop OS without leaving a trace. - aforensics/HiddenVM
2020 · github.com · its alternatives →
- 12
I wanted to see how fast an isolated code sandbox could start if I never had to boot a fresh VM. So instead of launching a new microVM per execution, I boot Firecracker once with Python and numpy already loaded, then snapshot the full VM state. Every execution after that creates a new KVM VM backed by a `MAP_PRIVATE` mapping of the snapshot memory, so Linux gives me copy-on-write pages automatically. That means each sandbox starts from an already-running Python process inside a real VM, runs the code, and exits. These are real KVM VMs, not containers: separate guest kernel, separate guest…
Mar 2026 · github.com · its alternatives →
- 13SJ
2012 · engineering.versal.com · its alternatives →
- 14
enject: Hide .env secrets from prAIng eyes: secrets live in local encrypted stores (per project) and are injected directly into apps at runtime, never touching disk as plaintext. - GreatScott/enject
Feb 2026 · github.com · its alternatives →
- 15
Minimalist, dependency-free virtual machine sandbox for microcontrollers and other resource-constrained devices. Single C file, no dynamic memory allocations, asynchronous design, pure C99 - ringtailsoftware/uvm32
Dec 2025 · github.com · its alternatives →
- 16
Hey all, Andy from the Deno team here. We're excited to share with you Deno Subhosting, an easy way to extend your platforms functionality by securely running untrusted JavaScript written by your users. When we first launched Deno Deploy in 2021, we were surprised at the volume of requests from companies about getting access to the APIs needed to run Deno Deploy. Many companies wanted to give their users the ability to write custom logic in their app, but setting this up in the cloud presents security concerns and a ton of infra work/maintenance. We realized that there was an…
2023 · deno.com · its alternatives →
- 17
GO sandbox to run untrusted code. Contribute to nishitm/goBox development by creating an account on GitHub.
2020 · github.com · its alternatives →
- 18
I built this because I was always creating machines on GH actions to test builds on different OS, and I wanted a tight CLI that could do it. I always saw Actions as this great resources and ephemeral machines you could do dev work in just were a natural way for me to work, so this grew out of that workflow. I didn't expect it to blow up, so it wasn't 100% finished when I posted it. But it should stabilize pretty quickly. Happy to know what you think and talk about it.
May 2026 · ghost.charity · its alternatives →
- 19
Hi HN! Sina here. i wanted to share this open source project (apache 2.0) that i've been working on for the past month or so. it's called hotcell and it lets you create/pause/manage sandboxes on any device (your laptop, linux vm, bare metal). i've tested it against various benchmarks that i found on computesdk (https://www.computesdk.com/benchmarks/sandboxes/) as well as the one shared by dax (cofounder of open code) on twitter recently (link to his original thread and my reply https://x.com/sinasanm/status/2078158598996443346) and…
Aug 2026 · github.com · its alternatives →
- 20
Hi HN, I’m Kyle and together with Andrew (https://news.ycombinator.com/user?id=stanleydrew) we’ve been working on Riza (https://riza.io), a project to make WASM sandboxing more approachable. We’re excited to share a developer preview of our code interpreter API with HN. There’s a bit of a backstory here. A few months ago, an old coworker reached out asking how to execute untrusted code generated by an LLM. Based on our experience building a plugin system for sqlc (https://sqlc.dev), we thought a sandboxed WASM runtime would be a good fit. A bit of hacking…
2024 · riza.io · its alternatives →
- 21
High performance secure & portable Rust functions in Node.js
2020 · secondstate.io · its alternatives →
- 22
BoxBox▲89File manager for Linux homelab and NAS-style servers
Jun 2026 · boxbox.radhey.dev · its alternatives →
- 23
Dropbox, Google and others form open source security group.
2014 · simplysecure.org · its alternatives →
- 24
Also compare
- Sandy – A tiny Sandbox to run untrusted code ️ alternatives
- Zerobox – Sandbox any command with file, network, credential controls alternatives
- Modal Sandboxes alternatives
- YepCode alternatives
- Drop – a rootless Linux sandbox with gVisor support alternatives
- I built a Rust crate for running unsafe code safely alternatives
Ranked by how close each launch is in meaning, then by votes. Prices were read from each product’s own site when checked and can change. Refine with your own description →