# Brig

The microVM sandbox for AI coding agents.

Source: https://wheredoirunthis.com/products/brig · JSON: https://wheredoirunthis.com/api/products/brig · Read on 2026-10-14

## At a glance

- Type: Sandbox
- Kind: Open source tool
- Isolation: Virtual machine
- Free tier: Not documented
- Starting price: Not disclosed
- GPU: Not documented
- Regions: Not disclosed
- Coverage: 13 of 61 assessed capabilities supported
- Agent readiness: read 7 of 10 signals, drive 5 of 8 signals

## Links

- Homepage: https://www.brig.sh/
- Docs: https://www.brig.sh/docs/
- Repository: https://github.com/brig-sh/brig

## Website design

Desktop public website · assessed 2026-10-14

Complete assessment.

The desktop landing and documentation pages use a restrained white, dark-ink and amber visual system: bold sans-serif headings, generous aligned spacing, pale technical panels and a pixel-like wordmark. Documentation adds flanking navigation and a hand-drawn four-step microVM explanation.

- Styles: Editorial minimalism, Swiss-inspired, Technical illustration
- Landing page: captured
- Pricing: not applicable
- Docs: captured

## Runtime

- **GPU & accelerators**: Not documented [source](https://www.brig.sh/docs/runtimes/)
- **BYOC (Bring your own cloud)**: na [source](https://www.brig.sh/docs/non-goals/)
- **Secrets management**: Named credentials forwarded into guest; host keychain/keyring, per-exec injection. [source](https://www.brig.sh/docs/secrets/)
- **Storage options**: Selected project read-write mount and per-session guest home. [source](https://www.brig.sh/docs/sessions/)
- **Supported workloads**: coding agents, interactive shells, OCI-based development environments [source](https://www.brig.sh/docs/profiles/)
- **Persistence**: Project and guest-home host mounts persist; disposable guest state does not. Brig-created home survives stop/reboot but rm deletes it. [source](https://www.brig.sh/docs/sessions/)
- **Data jurisdiction**: na [source](https://www.brig.sh/docs/non-goals/)
- **Resource limits & quotas**: Local host resources and profile settings; no cloud quota. [source](https://www.brig.sh/docs/profiles/)
- **SDK languages**: Not documented [source](https://www.brig.sh/docs/non-goals/)
- **Network & egress controls**: hvi gateway or Linux nftables policies; unsupported backends refuse policy-bound runs. [source](https://www.brig.sh/docs/runtimes/)
- **Snapshots & forks**: No [source](https://www.brig.sh/docs/non-goals/)
- **Deployment methods**: cli, local-unix-socket [source](https://www.brig.sh/docs/brigd/)
- **Isolation**: Virtual machine [source](https://www.brig.sh/docs/runtimes/)

## Capabilities

### AI & agents

| Capability | Status | Evidence |
| --- | --- | --- |
| Agent skills | Supported | "--skills copies your own ~/.claude skills and plugins into the guest home." [source](https://www.brig.sh/docs/cli/) |
| AI app builder | Not supported | "Not documented as a Brig capability in the captured runtime, CLI, profiles and non-goals; no positive evidence." [source](https://www.brig.sh/docs/non-goals/) |
| Autonomous QA agent | Not supported | "Not documented as a Brig capability in the captured runtime, CLI, profiles and non-goals; no positive evidence." [source](https://www.brig.sh/docs/non-goals/) |
| Built-in coding agent | Not supported | "Not documented as a Brig capability in the captured runtime, CLI, profiles and non-goals; no positive evidence." [source](https://www.brig.sh/docs/non-goals/) |
| BYOK for LLMs | Supported | "Named provider credentials are forwarded to the selected agent." [source](https://www.brig.sh/docs/secrets/) |
| Credential-injection proxy | Not supported | "Not documented as a Brig capability in the captured runtime, CLI, profiles and non-goals; no positive evidence." [source](https://www.brig.sh/docs/non-goals/) |
| LLM gateway | Not supported | "Not documented as a Brig capability in the captured runtime, CLI, profiles and non-goals; no positive evidence." [source](https://www.brig.sh/docs/non-goals/) |
| MCP client | Not supported | "Not documented as a Brig capability in the captured runtime, CLI, profiles and non-goals; no positive evidence." [source](https://www.brig.sh/docs/non-goals/) |
| MCP-server hosting | Not supported | "Not documented as a Brig capability in the captured runtime, CLI, profiles and non-goals; no positive evidence." [source](https://www.brig.sh/docs/non-goals/) |
| MCP server | Not supported | "Not documented as a Brig capability in the captured runtime, CLI, profiles and non-goals; no positive evidence." [source](https://www.brig.sh/docs/non-goals/) |
| Model inference API (first-party) | Not supported | "Not documented as a Brig capability in the captured runtime, CLI, profiles and non-goals; no positive evidence." [source](https://www.brig.sh/docs/non-goals/) |
| Preinstalled coding agent | Supported | "Shipped images include claude-code, codex, gemini, grok and opencode." [source](https://www.brig.sh/docs/profiles/) |

### Networking & delivery

| Capability | Status | Evidence |
| --- | --- | --- |
| Automatic HTTPS | Not supported | "Not documented as a Brig capability in the captured runtime, CLI, profiles and non-goals; no positive evidence." [source](https://www.brig.sh/docs/non-goals/) |
| Custom domains | Not supported | "Not documented as a Brig capability in the captured runtime, CLI, profiles and non-goals; no positive evidence." [source](https://www.brig.sh/docs/non-goals/) |
| Direct public IPv6 | Not supported | "Not documented as a Brig capability in the captured runtime, CLI, profiles and non-goals; no positive evidence." [source](https://www.brig.sh/docs/non-goals/) |
| Edge KV store | Not supported | "Not documented as a Brig capability in the captured runtime, CLI, profiles and non-goals; no positive evidence." [source](https://www.brig.sh/docs/non-goals/) |
| Egress controls | Supported | "Brig boots a policy-bound run only on enforced; hvi gateway or Linux nftables." [source](https://www.brig.sh/docs/runtimes/) |
| Email send / receive | Not supported | "Not documented as a Brig capability in the captured runtime, CLI, profiles and non-goals; no positive evidence." [source](https://www.brig.sh/docs/non-goals/) |
| Public preview URLs | Not supported | "Not documented as a Brig capability in the captured runtime, CLI, profiles and non-goals; no positive evidence." [source](https://www.brig.sh/docs/non-goals/) |
| Private networking | Supported | "Guests on one shared gateway can reach each other." [source](https://www.brig.sh/docs/runtimes/) |
| Built-in reverse proxy | Not supported | "Not documented as a Brig capability in the captured runtime, CLI, profiles and non-goals; no positive evidence." [source](https://www.brig.sh/docs/non-goals/) |

### Organisation & security

| Capability | Status | Evidence |
| --- | --- | --- |
| Built-in auth | Not supported | "Not documented as a Brig capability in the captured runtime, CLI, profiles and non-goals; no positive evidence." [source](https://www.brig.sh/docs/non-goals/) |
| BYOC | Not applicable | "Local self-hosted tool; no vendor-hosted regions or managed customer-cloud deployment." [source](https://www.brig.sh/docs/non-goals/) |
| Deploy into customers' VPCs | Not applicable | "Local self-hosted tool; no vendor-hosted regions or managed customer-cloud deployment." [source](https://www.brig.sh/docs/non-goals/) |
| Secrets management | Supported | "Host keychain/keyring-backed named secrets and per-exec forwarding." [source](https://www.brig.sh/docs/secrets/) |
| Self-host / OSS core | Supported | "Free Apache-2.0 tool installed on macOS or Linux." [source](https://www.brig.sh/docs/install/) |
| Sharing | Not supported | "Not documented as a Brig capability in the captured runtime, CLI, profiles and non-goals; no positive evidence." [source](https://www.brig.sh/docs/non-goals/) |
| SSO / SAML | Not supported | "Not documented as a Brig capability in the captured runtime, CLI, profiles and non-goals; no positive evidence." [source](https://www.brig.sh/docs/non-goals/) |
| Teams | Not supported | "Not documented as a Brig capability in the captured runtime, CLI, profiles and non-goals; no positive evidence." [source](https://www.brig.sh/docs/non-goals/) |
| Workload identity | Not supported | "Not documented as a Brig capability in the captured runtime, CLI, profiles and non-goals; no positive evidence." [source](https://www.brig.sh/docs/non-goals/) |

### Developer access

| Capability | Status | Evidence |
| --- | --- | --- |
| CLI | Supported | "Official brig command-line interface." [source](https://www.brig.sh/docs/cli/) |
| E2B-compatible API | Not supported | "Not documented as a Brig capability in the captured runtime, CLI, profiles and non-goals; no positive evidence." [source](https://www.brig.sh/docs/non-goals/) |
| Filesystem API | Not supported | "Not documented as a Brig capability in the captured runtime, CLI, profiles and non-goals; no positive evidence." [source](https://www.brig.sh/docs/non-goals/) |
| Git deploy | Not supported | "Not documented as a Brig capability in the captured runtime, CLI, profiles and non-goals; no positive evidence." [source](https://www.brig.sh/docs/non-goals/) |
| HTTP data API | Not supported | "Not documented as a Brig capability in the captured runtime, CLI, profiles and non-goals; no positive evidence." [source](https://www.brig.sh/docs/non-goals/) |
| OpenAPI spec | Not supported | "Not documented as a Brig capability in the captured runtime, CLI, profiles and non-goals; no positive evidence." [source](https://www.brig.sh/docs/non-goals/) |
| Private container registry | Not supported | "Not documented as a Brig capability in the captured runtime, CLI, profiles and non-goals; no positive evidence." [source](https://www.brig.sh/docs/non-goals/) |
| Public API | Supported | "The protocol is line-delimited JSON: one request per line, one response per line." [source](https://www.brig.sh/docs/brigd/) |
| SDK | Not supported | "Not documented as a Brig capability in the captured runtime, CLI, profiles and non-goals; no positive evidence." [source](https://www.brig.sh/docs/non-goals/) |
| SSH access | Not supported | "Not documented as a Brig capability in the captured runtime, CLI, profiles and non-goals; no positive evidence." [source](https://www.brig.sh/docs/non-goals/) |

### Compute & storage

| Capability | Status | Evidence |
| --- | --- | --- |
| Cloud-init / ignition config | Not supported | "Not documented as a Brig capability in the captured runtime, CLI, profiles and non-goals; no positive evidence." [source](https://www.brig.sh/docs/non-goals/) |
| Desktop / computer-use sandbox | Not supported | "Not documented as a Brig capability in the captured runtime, CLI, profiles and non-goals; no positive evidence." [source](https://www.brig.sh/docs/non-goals/) |
| GPU compute | Not supported | "Not documented as a Brig capability in the captured runtime, CLI, profiles and non-goals; no positive evidence." [source](https://www.brig.sh/docs/non-goals/) |
| Live-state (memory) snapshots | Not supported | "Not documented as a Brig capability in the captured runtime, CLI, profiles and non-goals; no positive evidence." [source](https://www.brig.sh/docs/non-goals/) |
| Multi-region | Not applicable | "Local self-hosted tool; no vendor-hosted regions or managed customer-cloud deployment." [source](https://www.brig.sh/docs/non-goals/) |
| Object storage | Not supported | "Not documented as a Brig capability in the captured runtime, CLI, profiles and non-goals; no positive evidence." [source](https://www.brig.sh/docs/non-goals/) |
| Persistent disk | Supported | "The guest home survives brig stop and a host reboot; brig rm deletes Brig-created homes." [source](https://www.brig.sh/docs/sessions/) |
| Sandbox templates / custom images | Supported | "Profiles declare OCI images and can override built-in profiles." [source](https://www.brig.sh/docs/profiles/) |
| Scale to zero | Not supported | "Not documented as a Brig capability in the captured runtime, CLI, profiles and non-goals; no positive evidence." [source](https://www.brig.sh/docs/non-goals/) |
| Selectable isolation runtime | Supported | "BRIG_HYPERVISOR or hypervisor in a profile selects hull backend; BRIG_CONTAINERD_RUNTIME selects shim." [source](https://www.brig.sh/docs/runtimes/) |
| Snapshots / forking | Not supported | "Not documented as a Brig capability in the captured runtime, CLI, profiles and non-goals; no positive evidence." [source](https://www.brig.sh/docs/non-goals/) |

### Data

| Capability | Status | Evidence |
| --- | --- | --- |
| Database branching | Not supported | "Not documented as a Brig capability in the captured runtime, CLI, profiles and non-goals; no positive evidence." [source](https://www.brig.sh/docs/non-goals/) |
| Ephemeral instant DB (no-signup) | Not supported | "Not documented as a Brig capability in the captured runtime, CLI, profiles and non-goals; no positive evidence." [source](https://www.brig.sh/docs/non-goals/) |
| First-party database | Not supported | "Not documented as a Brig capability in the captured runtime, CLI, profiles and non-goals; no positive evidence." [source](https://www.brig.sh/docs/non-goals/) |
| Vector search | Not supported | "Not documented as a Brig capability in the captured runtime, CLI, profiles and non-goals; no positive evidence." [source](https://www.brig.sh/docs/non-goals/) |

### Platform & operations

| Capability | Status | Evidence |
| --- | --- | --- |
| Managed CI/CD runners | Not supported | "Not documented as a Brig capability in the captured runtime, CLI, profiles and non-goals; no positive evidence." [source](https://www.brig.sh/docs/non-goals/) |
| Built-in observability | Supported | "brig logs streams the log of the sandbox; --gateway reads gateway logs." [source](https://www.brig.sh/docs/cli/) |
| Preview environments | Not supported | "Not documented as a Brig capability in the captured runtime, CLI, profiles and non-goals; no positive evidence." [source](https://www.brig.sh/docs/non-goals/) |
| Scheduled tasks | Not supported | "Not documented as a Brig capability in the captured runtime, CLI, profiles and non-goals; no positive evidence." [source](https://www.brig.sh/docs/non-goals/) |
| Project template marketplace | Not supported | "Not documented as a Brig capability in the captured runtime, CLI, profiles and non-goals; no positive evidence." [source](https://www.brig.sh/docs/non-goals/) |
| Durable workflows | Not supported | "Not documented as a Brig capability in the captured runtime, CLI, profiles and non-goals; no positive evidence." [source](https://www.brig.sh/docs/non-goals/) |

## Agent readiness

### Read: 7 of 10 signals present

7/10 signals (6 full, 1 partial)

- Llms txt: pass — "https://www.brig.sh/llms.txt: substantive categorized documentation index."
- Llms full txt: fail — "https://www.brig.sh/llms-full.txt: 404; docs variant also absent."
- Robots AI policy: partial — "https://www.brig.sh/robots.txt: wildcard Allow, no AI-specific directives."
- JSON LD: fail — "Homepage HTML has no JSON-LD."
- Sitemap: pass — "https://www.brig.sh/sitemap.xml: substantive docs sitemap."
- Meta quality: pass — "Homepage descriptive title, description, Open Graph."
- Markdown negotiation: fail — "Homepage/docs Accept text/markdown returns HTML; .md variants 404."
- Content efficiency: pass — "Visible text excluding scripts/styles: 7.27% of 30258 homepage HTML bytes."
- Docs discoverable: pass — "Homepage header links /docs/."
- Pricing machine readable: na — "No hosted pricing: free local Apache-2.0 tool."
- Anti bot: pass — "Product homepage, docs and well-known files accessible without challenge."

### Drive: 5 of 8 signals present

5/8 signals (4 full, 1 partial)

- Public API: pass — "https://www.brig.sh/docs/brigd/: documented owner-only Unix-socket JSON lifecycle API."
- Openapi spec: na — "Local JSON socket protocol, not hosted HTTP API."
- MCP server: fail — "No first-party MCP server documented; well-known probe 404."
- SDK packages: fail — "https://github.com/brig-sh/brig/blob/main/docs/non-goals.md: SDKs explicitly non-goal."
- Auth docs: pass — "https://www.brig.sh/docs/brigd/: socket 0600 and kernel peer UID authentication."
- Agent self serve creds: na — "No hosted account/key issuance; local owner UID."
- Webhooks: fail — "No lifecycle webhooks documented."
- CLI tool: pass — "https://www.brig.sh/docs/cli/: official CLI and JSON output."
- Error model: pass — "https://www.brig.sh/docs/brigd/: v, ok, code, error response fields and version rules."
- Rate limit docs: na — "No hosted API rate limits; local timeout/size limits documented."
- Agent config: partial — "https://www.brig.sh/docs/agents/: repository coding-agent instructions; no well-known endpoint."

## Coding harnesses

- Claude Code (Anthropic) — "Built-in claude-code profile." [source](https://www.brig.sh/docs/profiles/)
- Codex CLI (OpenAI) — "Built-in codex profile." [source](https://www.brig.sh/docs/profiles/)
- Gemini CLI (Google) — "Built-in gemini example profile; not tested continuously." [source](https://www.brig.sh/docs/profiles/)
- OpenCode (opencode) — "Built-in opencode example profile; not tested continuously." [source](https://www.brig.sh/docs/profiles/)

## Open source

- Repository: https://github.com/brig-sh/brig
- License: Apache-2.0
- Stars: 229
- Forks: 21
- Self-host methods: binary, package-manager, source-build
- Self-host dependencies: hull, nerdctl, containerd, urunc, cosign, oras

## Company & presence

- GitHub: https://github.com/brig-sh/brig
- Documentation: https://www.brig.sh/docs/

## Nearby in the atlas

- [Agent Safehouse](/products/agent-safehouse.md)
- [Agent Sandbox](/products/agent-sandbox.md)
- [Agent Substrate](/products/agent-substrate.md)
- [Agent37](/products/agent37.md)
- [AgentNest](/products/agentnest.md)
- [Anthropic Sandbox Runtime (srt)](/products/sandbox-runtime.md)

## Method

Facts come from the product's own public pages. Each claim carries its evidence: a quote and the page it came from. We count capabilities rather than grade products, and "Not assessed" means we have not checked, never that the product lacks it.