AI · alternatives · 2026
24 alternatives to TakoVM – open-source sandboxing for your agent's code
A secure file system for your agents to execute code - Tako-Research/TakoVM
Below are 24 products that do a similar job, ranked by how close each is in meaning and then by launch-day votes. Prices are shown for the 2 we have checked on their own sites, 2 of them free or with a free tier.
- 1
A secure file system for your agents to execute code - Tako-Research/TakoVM
Jun 2026 · github.com · its alternatives →
- 2
- 3
Runtimefree tier, from $99/mo▲299Sandboxed coding agents for everyone on your team
May 2026 · runtm.com · its alternatives →
- 4
Bullet▲240Hi HN, excited to be sharing this with you guys today. TL;DR: Bullet is a fast coding agent. At our company, we were burning hours waiting on agent runs. The models weren’t the problem. The agent loops around them were slow (unnecessary planning, oversized context, repeated searches, and serial tool calls). So we built Bullet as a passion project, the goal being to help you iterate faster, without giving up quality: - It automatically selects the model and reasoning level for each prompt. - It runs independent searches, reads, and commands in parallel. - It uses targeted code search instead…
Aug 2026 · codewithbullet.com · its alternatives →
- 5
Replicas▲239Hey HN! I'm Connor, creator of Replicas. I'm a heavy Codex/Claude Code user, and I wanted to hand off tasks to agents like I would to an engineer - kick something off before work, let it scaffold while I'm at lunch, even come back to a ready PR. The problem: existing alternatives use workspace VMs that are black boxes. I have no access to any of them - they can't run tests, read logs, or use tools like the Playwright MCP (which I use to verify agents actually fixed what they claim to fix). Replicas gives agents real cloud workspaces where they can: - Run your test suite and read the…
Jun 2026 · replicas.dev · its alternatives →
- 6
YepCode▲157Hey HN, We’re excited to introduce YepCode Run, a serverless runtime and SDK for executing code in secure sandboxes. Built on top of YepCode (https://yepcode.io), it allows you to execute code without any setup or installation. Perfect for: * Running AI-generated code – Securely in a sandbox environment, enabling fully autonomous AI agents. * Package Exploration – Try npm or PyPI packages without installing them locally. * Code Sharing – Easily share runnable code examples with others. * Quick Prototyping – Test snippets and algorithms on the fly. Just write or paste your code, and…
2022 · yepcode.io · its alternatives →
- 7
AnyFrame▲96Spawn sandboxes at the speed of natural language. Pause, resume, and snapshot the full state of an agent’s workspace — filesystem, processes, memory — and pick up later without losing context.
May 2026 · anyframe.dev · its alternatives →
- 8
Hey HN! Today we're launching Agent Vault - an open source HTTP credential proxy and vault for AI agents. Repo is at https://github.com/Infisical/agent-vault, and there's an in-depth description at https://infisical.com/blog/agent-vault-the-open-source-crede.... We built Agent Vault in response to a question that been plaguing the industry: How do we give agents secure access to services without them reading any secrets? Most teams building agents have run into this exact problem: They build an agent or agentic system and come to realize at some point…
Apr 2026 · github.com · its alternatives →
- 9
Hi! I’m Nathan: an ML Engineer at Mozilla.ai: I built agent-of-empires (aoe): a CLI application to help you manage all of your running Claude Code/Opencode sessions and know when they are waiting for you. - Written in rust and relies on tmux for security and reliability - Monitors state of cli sessions to tell you when an agent is running vs idle vs waiting for your input - Manage sessions by naming them, grouping them, configuring profiles for various settings I'm passionate about getting self-hosted open-weight LLMs to be valid options to compete with proprietary closed models. One…
Jan 2026 · github.com · its alternatives →
- 10
I originally was just messing with pi-autoresearch. Gave it a sample task to build the most portable coding agent. First cut was 6 KB of shell. Great for one-shots, unusable interactively. I was shocked it actually worked. Started building up -- adding features — but with a self-imposed rule: no new dependencies, and sub 500 LOC. This thing had to be truly portable. Just sh, curl, awk. System primitives only. Which means I did some genuinely disgusting things in awk, including JSON parsing and the OpenAI Responses tool loop with reasoning items carried across turns. It's now ~400 lines. In…
Apr 2026 · pu.dev · its alternatives →
- 11
Coding agents don't have long-term memory. But you do have months of full-fidelity agent transcripts stored on your machine. A simple solution that goes a long way: ingest those transcripts and logs into a structured SQLite database, then search them with ranked text match. Everything is fully local and doesn't require anything fancy like a graph database or hosted memory service. This is the idea behind ctx, a Rust CLI that handles the ingestion and searching. We give our agents a skill that tells them to reference past sessions before working in an area. Usually we do this through an…
Jul 2026 · github.com · its alternatives →
- 12
Contribute to vrn21/bouvet.com development by creating an account on GitHub.
Jan 2026 · github.com · its alternatives →
- 13
Hi everyone, I built a runtime to isolate untrusted code using wasm sandboxes. Basically, it protects your host system from problems that untrusted code can cause. We’ve had a great discussion about sandboxing in Python lately that elaborates a bit more on the problem [1]. In TypeScript, wasm integration is even more natural thanks to the close proximity between both ecosystems. The core is built in Rust. On top of that, I use WASI 0.2 via wasmtime and the component model, along with custom SDKs that keep things as idiomatic as possible. For example, in Python we have a simple decorator:…
Feb 2026 · github.com · its alternatives →
- 14
Single-agent LLMs suck at long-running complex tasks. We’ve open-sourced a multi-agent orchestrator that we’ve been using to handle long-running LLM tasks. We found that single LLM agents tend to stall, loop, or generate non-compiling code, so we built a harness for agents to coordinate over shared context while work is in progress. How it works: 1. Orchestrator agent that manages task decomposition 2. Sub-agents for parallel work 3. Subscriptions to task state and progress 4. Real-time sharing of intermediate discoveries between agents We tested this on a Putnam-level math problem, but the…
Feb 2026 · github.com · its alternatives →
- 15
Just watched this video by ThePrimeagen (https://www.youtube.com/watch?v=efwDZw7l2Nk) about attackers jailbreaking Claude to run cyber attacks. The core issue: AI agents need isolation. We built ERA to fix this – local microVM-based sandboxing for AI-generated code with hardware-level security. Think containers, but safer. Such attacks wouldn't touch your host if running in ERA. GitHub: https://github.com/BinSquare/ERA Quick start: https://github.com/BinSquare/ERA/tree/main/era-agent/tutoria... Would love your…
Nov 2025 · github.com · its alternatives →
- 16
I built this as a small side project to learn and experiment, and I ended up with this! I used a subdomain from my personal portfolio, and everything else runs on free tiers. The project uses Nuxt, SVG, Cloudflare Workers, D1 (SQL), KV, Terraform, and some agentic coding with OpenAI Codex and Claude Code. What started as a joke among friends turned into a fun excuse to build something end to end, from zero to production, and to explore a few things I’d never touched before. I’d really appreciate any feedback or suggestions.
Jan 2026 · certificate.brendonmatos.com · its alternatives →
- 17
We’ve been working with automating coding agents in sandboxes as of late. It’s bewildering how poorly standardized and difficult to use each agent varies between each other. We open-sourced the Sandbox Agent SDK based on tools we built internally to solve 3 problems: 1. Universal agent API: interact with any coding agent using the same API 2. Running agents inside the sandbox: Agent Sandbox provides a Rust binary that serves the universal agent API over HTTP, instead of having to futz with undocumented interfaces 3. Universal session schema: persisting sessions is always problematic, since…
Jan 2026 · github.com · its alternatives →
- 18
We build runtime security for AI agents. The playground started as an internal tool that we used to test our own guardrails. But we kept finding the same types of vulnerabilities because we think about attacks a certain way. At some point you need people who don't think like you. So we open-sourced it. Each challenge is a live agent with real tools and a published system prompt. Whenever a challenge is over, the full winning conversation transcript and guardrail logs get documented publicly. Building the general-purpose agent itself was probably the most fun part. Getting it to reliably use…
Mar 2026 · github.com · its alternatives →
- 191D
We just open-sourced the internal system we built at Assembled for running coding agents as a team. Coding agents worked well for individual engineers, but the surrounding workflow was a bit of a mess. We generally found that many engineers had different MCP connections and context for their agents, personal automations running that other people couldn’t access, and very little introspection for what a human’s input into the coding agent looked like. So we built an internal system that converted coding agents into shared team infrastructure. The system runs Codex, Claude Code, OpenCode, and…
Jun 2026 · its alternatives →
- 20
Code▲20Hey HN, Today we're launching Code, a community-driven, open-source coding agent for your terminal. It's a fork of OpenAI's codex with a focus on developer ergonomics and local control. Key features: - Browser integration – attach to your Chrome via CDP or use a built-in headless browser. You can browse pages, run the CLI in a browser session, and even take screenshots from the terminal. - Multi-agent commands – /plan, /solve and /code orchestrate multiple models (ChatGPT, Claude, Gemini) to propose and implement solutions, with consensus or race options. - Diff viewer – see…
2025 · github.com · its alternatives →
- 21
Run AI generated code in isolated sandboxes
2025 · github.com · its alternatives →
- 22
Open Source agent Sandboxes. Contribute to mihirahuja1/agentnestOSS development by creating an account on GitHub.
Jul 2026 · github.com · its alternatives →
- 23
hey all, happy to share research i've been working on for islo.dev in recent months. ever since the cheating agents (https://debugml.github.io/cheating-agents/) paper came out, revealing reward hacking was 4x more prevalent than previously estimated, i've been looking into how we can deal with the issue the common approach (taken by the tbench team) is post hoc trajectory analysis. i've been interested in the idea of reframing the problem as an endpoint security problem and tackling it via sandbox i hope you find it interesting, and thanks to the islo.dev team for…
Jun 2026 · github.com · its alternatives →
- 24
SmolVM is an open-source local sandbox for AI agents on macOS and Linux. I started building it because agent workflows need more than isolated code execution. They need a reusable environment: write files in one step, come back later, snapshot state, pause/resume, and increasingly interact with browsers or full desktop environments. Right now SmolVM is a Python SDK and CLI focused on local developer experience. Current features include: - local sandbox environments - macOS and Linux support - snapshotting - pause/resume - persistent environments across turns Install: ``` curl -sSL…
Apr 2026 · github.com · its alternatives →
Also compare
Ranked by how close each launch is in meaning, then by votes. Prices were read from each product’s own site when checked and can change. Refine with your own description →