Secure agents with dedicated microVMs using hypervisor-based isolation. Only project workspaces are mounted, protecting the host while allowing nested Docker and system package installation. Workflows run unattended, and sandboxes can be instantly reset if issues arise
Deno Sandbox
Safely run untrusted code with Deno Sandbox's lightweight Linux microVMs. Offering defense-in-depth security, they boot in under a second via JS or Python SDKs. Interact seamlessly through SSH, HTTP, or directly within VS Code.
Vibe
Instantly spin up zero-config Linux VMs on Mac to sandbox LLM agents. Vibe enables safe "YOLO" mode, allowing agents full control without risking your host. More secure than containers, this lightweight Rust tool (<1MB) ensures total isolation.
Supacode
Type : ADE ⫝
Environment : local
Isolation workspace : git worktree
Isolation runtime : no
⫝ agentic dev environment
Native macOS app with libghostty as the engine
Run Claude Code, Codex, Opencode in terminal without any translation layer
Isolated git worktree per task. Give each agent a free space to do its thing
Open PRs, see CI checks, fix conflicts, and more
Conductor
Type : ADE (agentic dev environment)
Isolation workspace : git worktree
Isolation runtime : no
Isolation workspace : git worktree
Isolation runtime : no
Add your repo
Conductor clones it and works entirely on your Mac
Conductor clones it and works entirely on your Mac
Deploy agents
Each Claude Code you spin up gets an isolated workspace
Each Claude Code you spin up gets an isolated workspace
Conduct
See who's working, what needs attention, and review code
See who's working, what needs attention, and review code
Superset
Type : ADE ⫝
Environment : local
Isolation workspace : git worktree
Isolation runtime : no
⫝ agentic dev environment
Run multiple AI agents simultaneously to fix bugs and build features in parallel. Superset supports any CLI tool, including Claude Code and Cursor. Each agent operates in a dedicated Git worktree, preventing conflicts and ensuring clean, independent workflows.
BoxLite
Isolation workspace : no
Isolation runtime : MicroVM
BoxLite lets you spin up lightweight VMs ("Boxes") and run OCI containers inside them. It's designed for use cases like AI agent sandboxes and multi-tenant code execution, where Docker alone isn't enough and full VM infrastructure is too heavy.
Rivet
Isolation workspace : git worktree
Isolation execution : no
State survives crashes, restarts, and process termination
Broadcast events to all connected clients as they happen
Retrieve full session history for debugging or analysis
Run thousands of concurrent agent sessions across your infrastructure
Koyeb
Isolation workspace : no
Isolation runtime : MicroVM
Koyeb provides high-performance, serverless microVMs on bare-metal for AI agents and untrusted code. Features include 250ms cold starts, auto-scaling, and total isolation. Perfect for secure workflows, prototyping, and testing globally without managing local infrastructure.
koyeb.com/blog/koyeb-sandboxes-fast-scalable-fully-isolated-environments-for-ai-agents
TT-LoudBox offers great performance per dollar for developers looking to run, test, and develop AI models, or port and develop libraries for HPC.
Ideal for developers who want to deploy a 4U rack mounted system flexible for use as either a single use or use with concurrent users and model.
512GB (16x32GB)
4x Tenstorrent Wormhole™ n300s Tensor Processor (Jim Keller)
$12,000
tenstorrent.com/hardware/tt-loudbox
AgentFS
AgentFS provides isolated filesystem access backed by a SQLite file so agents can safely run the CLI tools they were trained on.
TUI agentic coding harness
Opencode ᖊ
curl -fsSL https://opencode.ai/install | bash
᛭ opus, gpt, gemini, grok, (kimi, qwen, deepseek, glm, devstral)
Claude code ᖊ
curl -fsSL https://claude.ai/install.sh | bash
᛭ opus
Amp ᖊ
curl -fsSL https://ampcode.com/install.sh | bash
᛭ opus, gpt, gemini, grok, (kimi, qwen, deepseek, glm, devstral)
Mistral Vibe
curl -fsSL https://mistral.ai/vibe/install.sh | bash
᛭ devstral
Pi
npm install -g @mariozechner/pi-coding-agent
᛭ opus, gpt, gemini, grok, (kimi, qwen, deepseek, glm, devstral)
Crush
npm install -g @charmland/crush
᛭ opus, gpt, gemini, grok, (kimi, qwen, deepseek, glm, devstral)
Codex
npm install -g @openai/codex
᛭ opus, gpt, gemini, grok, (kimi, qwen, deepseek, glm, devstral)
Copilot
npm install -g @github/copilot
᛭ gpt, opus, grok
* ᖊ = cool
Building a TUI to index and search my coding agent sessions
stanislas.blog/2026/01/tui-index-search-coding-agent-sessions/
Netclode
Type : ADE ⫝
Environment : Cloud
Isolation workspace : git worktree
Isolation runtime : MicroVM kata
⫝ agentic dev environment
Netclode lets you safely self-host coding agents like Claude Code, accessible via iOS. It wraps sessions in Kata microVMs (k3s/Cloud Hypervisor) for total isolation. Agents execute securely, and VMs are instantly destroyed after use, leaving no trace on your system.
https://github.com/angristan/netclode
https://stanislas.blog/2026/02/netclode-self-hosted-cloud-coding-agent
