Alternatives
Products that do what Localsandbox – Agent sandbox with Bash, Python and portable filesystem does
A Python SDK for sandboxed filesystem operations, built on just-bash, AgentFS, and Pyodide. Provides AI agents with a persistent, isolated environment backed by SQLite.
- 1
- 2

- 3

- 4

- 5

- 6

- 7

- 8

Local sandboxes for AI agents on your Mac, Linux, bare metal
Aug 2026 · github.com
- 9

- 10

- 11AS
Hi HN, AgentBox is an SDK for running coding agents (Claude Code, Codex, OpenCode) inside sandboxes (Docker, E2B, Modal, Daytona, Vercel). One API. Swap the agent or the sandbox and your code doesn't change. Think of it as what the AI SDK did for LLMs, but for agent + runtime. Most wrappers call agents in non interactive mode (claude --print, codex exec). AgentBox instead boots each agent's native server inside the sandbox (Codex app-server over JSON-RPC, OpenCode serve over HTTP/SSE, Claude Code's SDK WebSocket transport) and drives it from the host, behaving like an interactive…
Apr 2026 · github.com
- 12

- 13

- 14MO
Hey everyone, We're excited to introduce MarinaBox, an open-source toolkit for creating isolated desktop/browser sandboxes tailored for AI agents. Over the past few months, we've worked on various projects involving: 1. AI agents interacting with computers (think Claude computer-use scenarios). 2. Browser automation for AI agents using tools like Playwright and Selenium. 3. Applications that need a live-session view to monitor AI agents' actions, with the ability for human-in-the-loop intervention. What we learned: All these scenarios share a common need for robust infrastructure. So,…
2024 · github.com
- 15RA
Hey HN, I built SuperHQ, an app that lets you run coding agents in local sandboxes (powered by Shuru). No custom UI wrapping the agents, they run as CLI/TUI like they were designed to. It just provides you the tools most of us (okay, maybe just me?) needed for running multiple coding agents in parallel without worrying about breaking your system or work environment. Each agent runs in its own microVM. You mount your projects in, writes go to a tmpfs overlay so your host is never touched, and you get a unified diff view to accept or discard changes. API keys never enter the sandbox, they…
Apr 2026 · superhq.ai
- 16SB
Hi HN, We are building Sanbox, a platform for running AI agents in isolated and resumable sandboxes. We use the OpenCode SDK as the harness, support reusable templates, and have a CLI that works with Codex, Claude Code, Cursor, CI, or your terminal. Each sandbox has MicroVM isolation, a persistent filesystem, and live trail of run events. Can also self-host if required for security/compliance. It's on the roadmap to add network ACL, secrets managements, LLM cost tracking & observability. We are also happy to build custom integrations or triggers for specific use cases. For example,…
Jul 2026 · sanbox.cloud
- 17SO
SmolVM is an open-source local sandbox for AI agents on macOS and Linux. I started building it because agent workflows need more than isolated code execution. They need a reusable environment: write files in one step, come back later, snapshot state, pause/resume, and increasingly interact with browsers or full desktop environments. Right now SmolVM is a Python SDK and CLI focused on local developer experience. Current features include: - local sandbox environments - macOS and Linux support - snapshotting - pause/resume - persistent environments across turns Install: ``` curl -sSL…
Apr 2026 · github.com
- 18

- 19BM
Wrapper around Apple's macOS sandbox-exec tool, which usually sandboxes native apps. It is "allow-first" i.e. it will not overprotect everything, just crucial information and therefore allows most tools to run without issues. Limiting is done using a .gitignore like file schema. Further TOML config options available. I built it because Docker sandboxing requires config and planning. Build in sandboxing of AI tools instead is limited to the very tools themselves, instead I wanted to have a simple cage around Claude running inside VSCode. Also needed to protect files inside a folder like…
Apr 2026 · github.com
- 20AR
Jul 2026 · github.com
- 21FP
As developers, we've used StackOverflow, blogs, tutorials, etc to solve our day-to-day code issues and we've been able to find answers to virtually all of our questions. At the same time, CodePen, CodeSandbox, JSFiddle, etc have made it simple to share and execute code for frontend developers but when I look for folks working at the backend side (preferably Python) there is nothing that entices the whole developer community yet. While other Python sandbox solutions are available, they do not provide installation choices or are not intended for embedding and sharing. With this thought, we…
2022 · pythonsandbox.dev
- 22UL
Mar 2026 · greywall.io
- 23AA
Hey HN! We've just open-sourced Agent, our framework for running computer-use workflows across multiple apps in isolated macOS/Linux sandboxes. After launching Computer a few weeks ago, we realized many of you wanted to run complex workflows that span multiple applications. Agent builds on Computer to make this possible. It works with local Ollama models (if you're privacy-minded) or cloud providers like OpenAI, Anthropic, and others. Why we built this: We kept hitting the same problems when building multi-app AI agents - they'd break in unpredictable ways, work inconsistently across…
2025 · github.com
- 24RA
Hi HN folks, I have been building AI agents for quite some time now. The shift has gone from LLM + Tools → LLM Workflows → Agent + Tools + Memory, and now we are finally seeing true agency emerge: agents as systems composed of tools, command-line access, fine-grained system capabilities, and memory. This way of building agents is powerful, and I believe it is here to stay. But the real question is: are the systems powering these agents ready for that future? I do not think so. Using Docker for a single agent is not going to scale well, because agents need to be lightweight and fast. LLMs…
Mar 2026 · github.com
Ranked by how close each launch is in meaning, then by votes. Refine with a description →