Docker Sandboxes | Sandboxes for Coding Agents | Docker

Secure, minimal container images for every team, free with enterprise features, if needed.
Heavy builds on cloud hardware, not your battery
Detach and close the laptop, the agent keeps going
Same microVM boundary on both sides, no downgrade
Sbx move recreates a sandbox’s filesystem on the other side, the work comes with it
Packages, services, repos, pull requests
Private Docker Engine in every sandbox
Off the rails? delete it and start fresh
Move a sandbox between laptop and cloud with one command.
One Kit ships a known-good setup to every engineer
Credentials proxied outside the VM
Cloud capacity with the same isolation
Works with the agents your developers already run.
The sandbox is the safety, not the prompt. Agents run unattended.
Every sandbox has its own Docker Engine. Build, run, compose. No socket mounting, no host privileges.
Delete it and start fresh in seconds. Nothing to clean up, nothing to roll back.
Pick the files, network endpoints and secrets the agent can reach. Everything else is blocked.
A hardware boundary. A runaway agent hits a boundary, not your machine.
Containers alone force elevated privileges the moment an agent builds images. A private engine per microVM does not.
Native on macOS, Windows, and Linux. Cold starts fast enough so you have no reason not to sandbox.
Keys are injected at the network boundary, so nothing in the sandbox can see or leak them.
Layer additional capabilities onto Claude Code or Codex.
Define a full agent: its image, its entrypoint, the network it can reach.
The real secret stays on your host.
Curated catalog ships with the CLI
Scope servers per sandbox, one project gets GitHub, the rest get nothing
Server credentials live in the sbx secret store
Works with whichever agent runs inside.
Isolation on your machine
Shared-kernel container for dev parity
Yes, same microVM model
Move a sandbox between them
One command, sbx move
Your AWS or GCP, via Terraform and Nomad
Your cloud, control plane stays on Daytona’s
Modal-managed infrastructure
Cloudflare’s infrastructure
Docker inside the sandbox
Private engine per sandbox
Engineering Lead, Warp