AI · alternatives · 2026
24 alternatives to Era – Open-source local sandbox for AI agents
Just watched this video by ThePrimeagen (https://www.youtube.com/watch?v=efwDZw7l2Nk) about attackers jailbreaking Claude to run cyber attacks. The core issue: AI agents need isolation. We built ERA to fix this – local microVM-based sandboxing for AI-generated code with hardware-level security. Think containers, but safer. Such attacks wouldn't touch your host if running in ERA. GitHub: https://github.com/BinSquare/ERA Quick start: https://github.com/BinSquare/ERA/tree/main/era-agent/tutoria... Would love your…
Era is an open-source sandbox tool that isolates AI-generated code using microVM-based technology and hardware-level security. It is designed for developers running AI agents locally who need protection against… Below are 24 products that do a similar job, ranked by how close each is in meaning and then by launch-day votes. Prices are shown for the 3 we have checked on their own sites, 3 of them free or with a free tier.
- 1
opencode▲393Your terminal's AI agent, with any model you want
2025 · opencode.ai · its alternatives →
- 2
Kastrafree tier, from $19.99/mo▲332Hi HN, Fernando and I built Kastra. Kastra intercepts AI agent tool calls and evaluates them against deterministic policies before they execute. We built this product to control pre- and post-inference workloads. This is aimed at developers using coding agents like Claude Code, Codex, Cursor, and OpenClaw. Kastra pushes an allow, hold, and deny decision before the action runs. You can build these policies in plain English from the web app. The interception engine evaluates the tools, targets, and parameters of every action at sub 1ms at a scale of billions of interceptions per day. We also…
Jul 2026 · kastra.ai · its alternatives →
- 3
CreateOS Sandbox▲153Instant, hardware Isolated Sandboxes for AI agents
Jul 2026 · createos.sh · its alternatives →
- 4
Agen▲138AI changed the way we code, but we're still using the old processes, and we've become the bottleneck, the AI is waiting for us - to reply, to open our laptops, to review the code, and so on. We're building the future of AI software development. The agents are autonomous, they run in sandboxes, automatically fix the pipelines, and deliver you the final, working code. You can use live preview to see the changes they made. Working across multiple repositories, all within the same session. This is the future - you don't need an IDE, and you don't have to run anything locally.
Mar 2026 · agenhq.com · its alternatives →
- 5
hi guys. been working on something i think is fundamentally missing in today's workflow with ai agents. vcs. i find myself struggling with questions that agents can't answer like "why did you do it?", "when did u delete this folder? why?", etc. or trying to /rewind (after a /compact...) or basically `bisect` to find when and why something was done by the agent in the current / previous session. just like git did for code, i think we are the same core capabilities with ai agents so... i developed an open source solution for that (currently supporting claude code) would love to…
May 2026 · github.com · its alternatives →
- 6
Hi! I’m Nathan: an ML Engineer at Mozilla.ai: I built agent-of-empires (aoe): a CLI application to help you manage all of your running Claude Code/Opencode sessions and know when they are waiting for you. - Written in rust and relies on tmux for security and reliability - Monitors state of cli sessions to tell you when an agent is running vs idle vs waiting for your input - Manage sessions by naming them, grouping them, configuring profiles for various settings I'm passionate about getting self-hosted open-weight LLMs to be valid options to compete with proprietary closed models. One…
Jan 2026 · github.com · its alternatives →
- 7
Contribute to vrn21/bouvet.com development by creating an account on GitHub.
Jan 2026 · github.com · its alternatives →
- 8
Build production agents with harness and sandbox
Apr 2026 · openai.com · its alternatives →
- 9
SuperHQ▲95Hey HN, I built SuperHQ, an app that lets you run coding agents in local sandboxes (powered by Shuru). No custom UI wrapping the agents, they run as CLI/TUI like they were designed to. It just provides you the tools most of us (okay, maybe just me?) needed for running multiple coding agents in parallel without worrying about breaking your system or work environment. Each agent runs in its own microVM. You mount your projects in, writes go to a tmpfs overlay so your host is never touched, and you get a unified diff view to accept or discard changes. API keys never enter the sandbox, they…
Apr 2026 · superhq.ai · its alternatives →
- 10
I've been building computer-use tools for a while, and I quietly launched this about a month ago (122 Stars on GH). I figured it was worth sharing here. Over the last few months, a lot of computer-use agents have come out: Codex, Claude Code, CUA, and others. Most of them seem to work roughly like this: 1. Take a screenshot 2. Have the model predict pixel coordinates 3. Click x,y 4. Take another screenshot 5. Repeat That works, but it's slow, expensive in tokens, and fragile. If the UI shifts a few pixels, things break. And the model still doesn't know what any element actually is. But the…
May 2026 · github.com · its alternatives →
- 11
Hi HN, This is a project I've been working on since the beginning of 2025 full time, without funding. Coding agents have fundamentally changed the way we write software. When you let an agent write code, pull dependencies, and run scripts, you are delegating trust while still keeping the responsibility. You shouldn't have to choose between moving fast with agents and maintaining basic control over your host machine. Normally, we just inspect the final result, treating the app like a black box. Most security tools only sandbox the app runtime and ignore the build phase. CapaKit is my attempt…
Jun 2026 · capakit.com · its alternatives →
- 12
Hi HN, we built SuperHQ, an open source app that runs AI coding agents in isolated microVM sandboxes instead of directly on your machine. Each agent gets its own VM with a full Debian environment. You mount your projects in, writes go to a tmpfs overlay so your host is never touched, and you get a diff view to accept or discard changes. API keys never enter the sandbox. We also just launched remote.superhq.ai which acts as a remote control for SuperHQ, allowing you to access your workspaces and agents from anywhere.
Apr 2026 · github.com · its alternatives →
- 13
We’ve been working with automating coding agents in sandboxes as of late. It’s bewildering how poorly standardized and difficult to use each agent varies between each other. We open-sourced the Sandbox Agent SDK based on tools we built internally to solve 3 problems: 1. Universal agent API: interact with any coding agent using the same API 2. Running agents inside the sandbox: Agent Sandbox provides a Rust binary that serves the universal agent API over HTTP, instead of having to futz with undocumented interfaces 3. Universal session schema: persisting sessions is always problematic, since…
Jan 2026 · github.com · its alternatives →
- 14
I made this for myself, and it seemed like it might be useful to others. I'd love some feedback, both on the threat model and the tool itself. I hope you find it useful! Backstory: I've been using many agents in parallel as I work on a somewhat ambitious financial analysis tool. I was juggling agents working on epics for the linear solver, the persistence layer, the front-end, and planning for the second-generation solver. I was losing my mind playing whack-a-mole with the permission prompts. YOLO mode felt so tempting. And yet. Then it occurred to me: what if YOLO mode isn't so bad?…
Jan 2026 · github.com · its alternatives →
- 15
We build runtime security for AI agents. The playground started as an internal tool that we used to test our own guardrails. But we kept finding the same types of vulnerabilities because we think about attacks a certain way. At some point you need people who don't think like you. So we open-sourced it. Each challenge is a live agent with real tools and a published system prompt. Whenever a challenge is over, the full winning conversation transcript and guardrail logs get documented publicly. Building the general-purpose agent itself was probably the most fun part. Getting it to reliably use…
Mar 2026 · github.com · its alternatives →
- 16
Open Source agent Sandboxes. Contribute to mihirahuja1/agentnestOSS development by creating an account on GitHub.
Jul 2026 · github.com · its alternatives →
- 17
Run AI generated code in isolated sandboxes
2025 · github.com · its alternatives →
- 18
Hi HN, We are building Sanbox, a platform for running AI agents in isolated and resumable sandboxes. We use the OpenCode SDK as the harness, support reusable templates, and have a CLI that works with Codex, Claude Code, Cursor, CI, or your terminal. Each sandbox has MicroVM isolation, a persistent filesystem, and live trail of run events. Can also self-host if required for security/compliance. It's on the roadmap to add network ACL, secrets managements, LLM cost tracking & observability. We are also happy to build custom integrations or triggers for specific use cases. For example,…
Jul 2026 · sanbox.cloud · its alternatives →
- 19
We just open-sourced Computer, a Computer-Use Interface (CUI) framework that enables AI agents to interact with isolated macOS and Linux sandboxes, with near-native performance on Apple Silicon. Computer provides a PyAutoGUI-compatible interface that can be plugged into any AI agent system (OpenAI Agents SDK , Langchain, CrewAI, AutoGen, etc.). Why Computer? As CUA AI agents become more capable, they need secure environments to operate in. Computer solves this with: • Isolation: Run agents in sandboxes completely separate from your host system. • Reliability: Create reproducible environments…
2025 · github.com · its alternatives →
- 20
AI agents today run with full access to your credentials and systems. Endo's object-capability model grants only what's needed, nothing more.
Apr 2026 · dcfoundation.io · its alternatives →
- 21MO
Hey everyone, We're excited to introduce MarinaBox, an open-source toolkit for creating isolated desktop/browser sandboxes tailored for AI agents. Over the past few months, we've worked on various projects involving: 1. AI agents interacting with computers (think Claude computer-use scenarios). 2. Browser automation for AI agents using tools like Playwright and Selenium. 3. Applications that need a live-session view to monitor AI agents' actions, with the ability for human-in-the-loop intervention. What we learned: All these scenarios share a common need for robust infrastructure. So,…
2024 · github.com · its alternatives →
- 22
- 23
Hi HN folks, I have been building AI agents for quite some time now. The shift has gone from LLM + Tools → LLM Workflows → Agent + Tools + Memory, and now we are finally seeing true agency emerge: agents as systems composed of tools, command-line access, fine-grained system capabilities, and memory. This way of building agents is powerful, and I believe it is here to stay. But the real question is: are the systems powering these agents ready for that future? I do not think so. Using Docker for a single agent is not going to scale well, because agents need to be lightweight and fast. LLMs…
Mar 2026 · github.com · its alternatives →
- 24
Run AI Agents on your cloud infrastructurefree tier▲12Hi, founder of Okteto here! We’ve been experimenting with AI agents in our workflows at Okteto. Running them locally worked at first, but quickly became painful. git worktrees, multiple terminals, and messy context switches slowed us down. So we built Agent Fleets: ephemeral, fully managed environments for AI agents, built on top of Okteto’s development platform. Each agent runs in its own containerized environment on your infrastructure, with the services, tools, and policies it needs. You can spin up agents with a single click or API call. No local setup. No git worktrees. The beta…
2025 · okteto.com · its alternatives →
Also compare
Ranked by how close each launch is in meaning, then by votes. Prices were read from each product’s own site when checked and can change. Refine with your own description →