# sandbox

Sandboxes for coding agents — Linux VMs, Git, and deploys in one box

Freestyle is YC-backed sandbox infrastructure built for AI coding agents, shipping secure Linux VMs with nested virtualization, Git servers, and one-click web deploys. It lets agents run real workloads, branch repos, and deploy apps under short-lived identities while billing only for active compute. Used in production by vly.ai, Rork, and Vibeflow.

Open-source async coding agent you can run in your own sandbox

Open-source framework from LangChain AI for building your organization's internal coding agent — the same pattern Stripe's Minions, Ramp's Inspect, and Coinbase's Cloudbot follow. Built on LangGraph and Deep Agents, Open SWE runs each task in an isolated cloud sandbox (Modal, Daytona, Runloop, or LangSmith), invokes from Slack, Linear, or GitHub, orchestrates subagents, and opens pull requests autonomously — customizable end-to-end for your codebase and conventions.

Multi-agent loop runner for autonomous PRD completion

ralphy is an autonomous bash-based orchestrator that runs Claude Code, Codex, OpenCode, Cursor agent, Qwen, and Droid in a continuous loop until a PRD is complete. Supports parallel task execution with isolated git worktrees, automated branching per task, PR creation, and webhook notifications to Discord and Slack. Cross-platform on macOS, Linux, and Windows via WSL2 or Git Bash.

Agent orchestration platform for Claude multi-agent swarms

ruflo is an agent orchestration platform built for Claude that enables deploying intelligent multi-agent swarms and coordinating autonomous workflows. Features enterprise-grade architecture with distributed swarm intelligence, self-learning capabilities, 100+ pre-built specialized agents, fault-tolerant consensus mechanisms, and RAG integration. Native Claude Code and Codex integration with MCP extension support.

Personal AI agent in your terminal with local tool access

gptme is one of the earliest terminal-based AI agent CLIs, launched in spring 2023. It equips a personal AI agent with local tools to run shell commands, write and edit code, browse the web via Playwright, and use vision capabilities. Supports MCP integration and an extensible plugin system for building persistent autonomous agents. The reference agent Bob has completed over 1700 sessions.

Parallel coding agent orchestrator with autonomous CI handling

Agent Orchestrator by Composio manages fleets of parallel AI coding agents, each working in isolated git worktrees. It autonomously handles CI failures, resolves code review comments, and manages pull requests with human intervention only for judgment calls. Agent-agnostic design supports Claude Code, Codex, and Aider with a unified web dashboard.

OpenAI's autonomous coding agent orchestration framework

Symphony is OpenAI's open-source framework that turns project work into isolated, autonomous implementation runs. Instead of supervising coding agents line by line, teams assign tasks from project boards and Symphony dispatches agents to handle them independently. Each agent works in an isolated workspace, provides proof of work documentation including CI status and PR review feedback, and can automatically merge approved pull requests.

Rust-based agent OS with built-in security, WASM sandboxing, and multi-agent runtime

OpenFang is an open-source agent operating system built in Rust that provides a secure multi-agent runtime with WASM sandboxing, auditability layers, and multi-channel communication. It goes beyond typical orchestration SDKs by treating agent security and operational isolation as first-class concerns, making it suitable for teams deploying agents in environments where trust boundaries and audit trails matter.

Open-source sandboxes and SDKs for AI agents that control desktops

CUA is an open-source infrastructure platform for building, benchmarking, and deploying AI agents that autonomously control full desktop environments. It provides secure sandboxed VMs across macOS, Linux, Windows, and Android with a unified Python SDK for screenshots, mouse/keyboard control, shell commands, and file I/O. Includes CuaBot CLI for running agents in sandboxes, Cua-Bench for standardized evaluation, and Lume for near-native macOS virtualization on Apple Silicon.

Local microVM sandboxes for AI agent code execution

Microsandbox provides hardware-level isolated sandboxes for AI agents to execute code safely on local machines. Using microVMs with sub-200ms boot times, it offers stronger isolation than Docker containers while remaining lightweight enough for development workstations. OCI-compatible with support for Python and Node.js runtimes. Apache-2.0 licensed with 5,000+ GitHub stars.

Open-source browser infrastructure for AI agents at scale

Steel is an open-source browser API purpose-built for AI agents, providing managed headless browser sessions with anti-bot bypass, proxy rotation, CAPTCHA solving, and session persistence. It handles the infrastructure layer that browser automation agents like Browser Use and Stagehand run on top of. Self-hostable or available as a cloud service. Over 6,000 GitHub stars.

Containerized sandboxes for AI coding agents

Dagger Container Use provides isolated container environments for AI coding agents, enabling multiple agents to work in separate sandboxed branches simultaneously. Built by the Dagger team, it ensures reproducibility and safety for autonomous code execution by giving each agent its own containerized workspace with full toolchain access.

Open-source AI coding agent for large projects and real-world tasks

Terminal-based coding engine that breaks complex tasks into subtasks with support for 2M token context windows, diff review sandboxes, and both autonomous and manual modes. Multi-model pipelines work with Anthropic, OpenAI, and Google. With 15k+ GitHub stars, Plandex is a mature open-source option for developers tackling large, multi-step development tasks from the command line.