Secure, lightweight micro-VM sandboxes for AI agents.
We build sandbox infrastructure that lets AI agents run untrusted code safely — hardware-isolated, sub-second boot, zero-daemon.
┌───────────────────────────────────────────────┐
│ │
│ BoxRun │
│ Sandbox Management Platform │
│ · · · · · · · · · · · · · · · · · · · · · · │
│ REST API Server │
│ CLI & Web Dashboard │
│ Python & Rust SDK │
│ │
└───────────────────────┬───────────────────────┘
│
powered by
│
┌───────────────────────▼───────────────────────┐
│ │
│ BoxLite │
│ Embedded micro-VM Sandbox Library │
│ · · · · · · · · · · · · · · · · · · · · · · │
│ ┌──────┐ ┌──────┐ ┌──────┐ │
│ │ VM │ │ VM │ │ VM │ ... │
│ └──────┘ └──────┘ └──────┘ │
│ KVM / HVF · OCI Images · Async I/O │
│ │
└───────────────────────────────────────────────┘
- BoxLite — Embedded micro-VM sandbox runtime. Lightweight, hardware-isolated, OCI-compatible. SDKs for Python, Node.js, Rust, and C.
- BoxRun — Sandbox management platform. REST API, CLI, web dashboard, single-binary deployment. Powered by BoxLite.
BoxLite — embed in your app:
pip install boxliteimport asyncio
from boxlite import SimpleBox
async def main():
async with SimpleBox("python:slim") as box:
result = await box.run("echo 'Hello from a micro-VM!'")
print(result.stdout)
asyncio.run(main())BoxRun — platform:
boxrun shell ubuntu- Sub-second boot — micro-VMs start in milliseconds, not minutes
- Hardware isolation — each sandbox has its own kernel (KVM / Hypervisor.framework)
- OCI compatible — use any Docker image (
python:slim,node:alpine,ubuntu, etc.) - No daemon — BoxLite links as a library; BoxRun ships as a single binary
- Async-first — designed for high concurrency with streaming I/O
