#SandBox

Large-scale agentic training and evaluation with large language models (LLMs) rely on isolated, stateful execution environments in which models inspect repositories, invoke tools, execute commands, and interact with task-specific services.…

SAFA details the full exploitation of CVE-2025-13032, turning a double-fetch vulnerability in Avast's kernel driver into a local privilege escalation to SYSTEM on Windows 11.

We’re on a journey to advance and democratize artificial intelligence through open source and open science.

Deepsec is a security harness for finding vulnerabilities in your codebase powered by coding agents - vercel-labs/deepsec

A game where you are a computer's OS and you have to manage processes, memory and I/O events. - plbrault/youre-the-os

Self-hosted dev sandboxes with preview URLs. One command. No Kubernetes, perfect for coding agents and Saas factories - tastyeffectco/sandboxes

A hands-on guide to running Claude Code in a locked-down sandbox — Docker isolation, filesystem and network restrictions, permission modes, and keeping your secrets out of reach. Real config you can copy.

Vercel Sandboxes now support opening and binding to port 8080. The controller prorcess now uses a less common port, 23456.

Sandboxes now allow you to run docker without any config changes to work with containerized applications

Breaking the WebAssembly Sandbox Tax: A Zero-Copy C++ JIT Decoder Scaling to 64...

Vercel Sandbox securely runs untrusted code in isolated cloud environments, like AI-generated code. Create ephemeral, isolated microVMs using the new Sandbox SDK, with up to 45m execution times. Now in Beta and available to customers on all plans.

Vercel Ship 2025 added new building blocks for an AI era: Fast, flexible, and secure by default. Lower costs with Fluid's Active CPU pricing, Rolling Releases for safer deployments, invisible CAPTCHA with BotID. See these and more in our recap.

You can now run commands with sudo inside Vercel Sandbox, giving you full control to install packages at runtime, just like on a traditional Linux system.

Run up to 2000 sandboxes at the same time. Sandbox also now supports listening on up to 4 different ports

Pro and Enterprise teams can now run Vercel Sandboxes for up to 5 hours (up from 45 minutes). This extension unlocks new possibilities for workloads that require longer runtimes

You can now extend the duration of a running Vercel Sandbox using the new extendTimeout method. This lets you keep long-running sandboxes alive beyond their initial timeout. It is useful for workflows that take longer than expected

Vercel now has a native Python library hosted on PyPI to simplify tasks such as executing code on Vercel Sandboxes, transferring objects to Vercel Blob, working with the Runtime Cache and retrieving project tokens.

The Sandbox CLI, based on the Docker CLI, allows you to manage sandboxes, execute commands, copy files, and more from the command line.

Vercel Sandbox now supports running sandboxes with the Node.js 24 LTS runtime. This is supported in @vercel/sandbox versions 1.1.0 and later.