# Isorun

Sandboxes in milliseconds.

Source: https://wheredoirunthis.com/products/isorun · JSON: https://wheredoirunthis.com/api/products/isorun · Read on 2026-10-12

## At a glance

- Type: Sandbox
- Kind: Hosted
- Isolation: Virtual machine
- Free tier: Not documented
- Starting price: $0.04/h
- GPU: Not documented
- Regions: 2
- Coverage: 19 of 61 assessed capabilities supported
- Agent readiness: read 11 of 11 signals, drive 10 of 11 signals

## Links

- Homepage: https://isorun.ai/
- Docs: https://docs.isorun.ai/
- Pricing: https://docs.isorun.ai/getting-started/pricing
- Repository: https://github.com/isorun/sdk

## Pricing

- Model: Usage-metered; per-second compute, no minimums or hibernated runtime charge.
- Unit: $0.025/vCPU-hour + $0.015/GiB RAM-hour; durable data $0.02/GB-month.
- Free tier: $50 signup credit (not recurring); about 1,250 default sandbox hours.

| Tier | Price | Includes | Notes |
| --- | --- | --- | --- |
| Default | $0.040/hour | 1 vCPU + 1 GiB RAM | Representative compute shape, not a subscription; storage separately metered. [source](https://docs.isorun.ai/getting-started/pricing) |
| 2 vCPU | $0.110/hour | 2 vCPU + 4 GiB RAM | Representative compute shape, not a subscription; storage separately metered. [source](https://docs.isorun.ai/getting-started/pricing) |
| 4 vCPU | $0.220/hour | 4 vCPU + 8 GiB RAM | Representative compute shape, not a subscription; storage separately metered. [source](https://docs.isorun.ai/getting-started/pricing) |
| 8 vCPU | $0.440/hour | 8 vCPU + 16 GiB RAM | Representative compute shape, not a subscription; storage separately metered. [source](https://docs.isorun.ai/getting-started/pricing) |

- Overages: Compute metered from create to destroy; hibernated runtime free. Egress/platform fees included; durable disk $0.02/GB-month.
- Card required: No
- Source: https://docs.isorun.ai/getting-started/pricing

## Runtime

- **GPU & accelerators**: Not documented — "No GPU offering found on landing or complete docs." [source](https://isorun.ai/) (confidence: low)
- **BYOC (Bring your own cloud)**: Not documented — "No customer-cloud deployment documented; SDK is not the server core." [source](https://github.com/isorun/sdk) (confidence: low)
- **Secrets management**: Host-side credential-injection reverse proxy keeps raw API keys outside the guest. [source](https://docs.isorun.ai/security/credential-injection)
- **Storage options**: Default 4 GiB scratch disk; durable ext4 Tigris Cloud Disk at $0.02/GB-month stored; single-sandbox attachment lease. [source](https://docs.isorun.ai/sandboxes/persistent-storage)
- **Supported workloads**: untrusted agent code, browser and computer use, Linux OCI workloads, HTTP services, parallel forked experiments [source](https://isorun.ai/)
- **Persistence**: Durable named ext4 disks survive sandbox destruction; hibernate preserves live processes. [source](https://docs.isorun.ai/sandboxes/persistent-storage)
- **Data jurisdiction**: Organization/API keys scoped to US or EU; exact compute locations and legal jurisdiction not disclosed. [source](https://docs.isorun.ai/getting-started/authentication)
- **Resource limits & quotas**: Default 1 vCPU, 1 GiB RAM, 4 GiB scratch; default sandbox auto-destroy 300s and exec 30s. Rate/concurrency limits mentioned without numeric quotas. [source](https://docs.isorun.ai/troubleshooting)
- **SDK languages**: TypeScript [source](https://docs.isorun.ai/sdks/typescript)
- **Network & egress controls**: Per-sandbox CIDR/hostname allow/deny rules; named network profiles; method/path endpoint rules. [source](https://docs.isorun.ai/security/network-filtering)
- **Snapshots & forks**: Snapshot/restore and fork filesystem, memory, and processes; copy-on-write persistent disk snapshots/forks. [source](https://docs.isorun.ai/sandboxes/checkpoints-and-rollback)
- **Deployment methods**: REST API, TypeScript SDK, stdio MCP server, OCI images [source](https://docs.isorun.ai/api-reference)
- **Isolation**: Virtual machine — "Landing explicitly says KVM hardware isolation and each sandbox boots its own guest kernel; no Firecracker implementation asserted." [source](https://isorun.ai/) (confidence: high)

## Capabilities

### AI & agents

| Capability | Status | Evidence |
| --- | --- | --- |
| Agent skills | Supported | "It exposes the canonical Isorun primitives as MCP tools over stdio." [source](https://docs.isorun.ai/integrations/mcp-server) |
| AI app builder | Not supported | "No advertised app-builder capability found in the landing page, complete docs or SDK README; not proof of impossibility." [source](https://docs.isorun.ai/llms-full.txt) |
| Autonomous QA agent | Not supported | "No advertised autonomous-qa-agent capability found in the landing page, complete docs or SDK README; not proof of impossibility." [source](https://docs.isorun.ai/llms-full.txt) |
| Built-in coding agent | Not supported | "No advertised built-in-agent capability found in the landing page, complete docs or SDK README; not proof of impossibility." [source](https://docs.isorun.ai/llms-full.txt) |
| BYOK for LLMs | Partially supported | "Bring upstream API credentials through host-side injection; not a hosted model gateway." [source](https://docs.isorun.ai/security/credential-injection) |
| Credential-injection proxy | Supported | "host-side reverse proxy keeps API keys out of the guest" [source](https://docs.isorun.ai/security/credential-injection) |
| LLM gateway | Not supported | "No advertised llm-gateway capability found in the landing page, complete docs or SDK README; not proof of impossibility." [source](https://docs.isorun.ai/llms-full.txt) |
| MCP client | Not supported | "No advertised mcp-client capability found in the landing page, complete docs or SDK README; not proof of impossibility." [source](https://docs.isorun.ai/llms-full.txt) |
| MCP-server hosting | Not supported | "No advertised mcp-hosting capability found in the landing page, complete docs or SDK README; not proof of impossibility." [source](https://docs.isorun.ai/llms-full.txt) |
| MCP server | Supported | "ships an MCP server CLI, isorun-mcp" [source](https://docs.isorun.ai/integrations/mcp-server) |
| Model inference API (first-party) | Not supported | "No advertised model-inference-api capability found in the landing page, complete docs or SDK README; not proof of impossibility." [source](https://docs.isorun.ai/llms-full.txt) |
| Preinstalled coding agent | Partially supported | "Claude Managed Agents adapter with a dedicated image; not the default sandbox image." [source](https://docs.isorun.ai/integrations/claude-managed-agents) |

### Networking & delivery

| Capability | Status | Evidence |
| --- | --- | --- |
| Automatic HTTPS | Supported | "reach it over HTTPS." [source](https://docs.isorun.ai/sandboxes/public-urls) |
| Custom domains | Not supported | "No advertised custom-domains capability found in the landing page, complete docs or SDK README; not proof of impossibility." [source](https://docs.isorun.ai/llms-full.txt) |
| Direct public IPv6 | Not supported | "No advertised direct-ipv6 capability found in the landing page, complete docs or SDK README; not proof of impossibility." [source](https://docs.isorun.ai/llms-full.txt) |
| Edge KV store | Not supported | "No advertised edge-kv capability found in the landing page, complete docs or SDK README; not proof of impossibility." [source](https://docs.isorun.ai/llms-full.txt) |
| Egress controls | Supported | "per-sandbox egress policy" [source](https://docs.isorun.ai/security/network-filtering) |
| Email send / receive | Not supported | "No advertised email-send-receive capability found in the landing page, complete docs or SDK README; not proof of impossibility." [source](https://docs.isorun.ai/llms-full.txt) |
| Public preview URLs | Partially supported | "The URL is authenticated, not public. Every request needs your Authorization: Bearer <API key> header." [source](https://docs.isorun.ai/sandboxes/public-urls) |
| Private networking | Not supported | "No advertised private-networking capability found in the landing page, complete docs or SDK README; not proof of impossibility." [source](https://docs.isorun.ai/llms-full.txt) |
| Built-in reverse proxy | Supported | "returns a URL that proxies to whatever your sandbox is listening on at that port." [source](https://docs.isorun.ai/sandboxes/public-urls) |

### Organisation & security

| Capability | Status | Evidence |
| --- | --- | --- |
| Built-in auth | Partially supported | "URL is authenticated by the platform API key, not end-user authentication." [source](https://docs.isorun.ai/sandboxes/public-urls) |
| BYOC | Not supported | "No advertised byoc capability found in the landing page, complete docs or SDK README; not proof of impossibility." [source](https://docs.isorun.ai/llms-full.txt) |
| Deploy into customers' VPCs | Not supported | "No advertised customer-vpc-deploy capability found in the landing page, complete docs or SDK README; not proof of impossibility." [source](https://docs.isorun.ai/llms-full.txt) |
| Secrets management | Supported | "Inject API keys into a sandbox without exposing the raw secret" [source](https://docs.isorun.ai/security/credential-injection) |
| Self-host / OSS core | Not supported | "No advertised self-host-oss capability found in the landing page, complete docs or SDK README; not proof of impossibility." [source](https://docs.isorun.ai/llms-full.txt) |
| Sharing | Partially supported | "Proxy it from your own backend, or attach the header from your client, rather than handing the raw URL to an end user." [source](https://docs.isorun.ai/sandboxes/public-urls) |
| SSO / SAML | Not supported | "No advertised sso-saml capability found in the landing page, complete docs or SDK README; not proof of impossibility." [source](https://docs.isorun.ai/llms-full.txt) |
| Teams | Not supported | "No advertised teams capability found in the landing page, complete docs or SDK README; not proof of impossibility." [source](https://docs.isorun.ai/llms-full.txt) |
| Workload identity | Not supported | "No advertised workload-identity capability found in the landing page, complete docs or SDK README; not proof of impossibility." [source](https://docs.isorun.ai/llms-full.txt) |

### Developer access

| Capability | Status | Evidence |
| --- | --- | --- |
| CLI | Supported | "npm install -g isorun @modelcontextprotocol/sdk zod; isorun-mcp on your PATH." [source](https://docs.isorun.ai/integrations/mcp-server) |
| E2B-compatible API | Not supported | "No advertised e2b-compatible-api capability found in the landing page, complete docs or SDK README; not proof of impossibility." [source](https://docs.isorun.ai/llms-full.txt) |
| Filesystem API | Supported | "readFile, writeFile, readdir" [source](https://docs.isorun.ai/sdks/typescript) |
| Git deploy | Not supported | "No advertised git-deploy capability found in the landing page, complete docs or SDK README; not proof of impossibility." [source](https://docs.isorun.ai/llms-full.txt) |
| HTTP data API | Not supported | "No advertised http-query-api capability found in the landing page, complete docs or SDK README; not proof of impossibility." [source](https://docs.isorun.ai/llms-full.txt) |
| OpenAPI spec | Partially supported | "REST API, OpenAPI 3.1 spec, Bearer auth. No download link found; conventional spec paths returned 404." [source](https://docs.isorun.ai/changelog) |
| Private container registry | Partially supported | "Use any Docker Hub / GHCR / private-registry image as a sandbox base; no hosted registry advertised." [source](https://docs.isorun.ai/sandboxes/any-oci-image) |
| Public API | Supported | "REST API for sandbox lifecycle, execution, files, snapshots, fork, hibernate, audit, and network policy." [source](https://docs.isorun.ai/api-reference) |
| SDK | Supported | "Official Node.js client for sandbox lifecycle" [source](https://docs.isorun.ai/sdks/typescript) |
| SSH access | Not supported | "No advertised ssh-access capability found in the landing page, complete docs or SDK README; not proof of impossibility." [source](https://docs.isorun.ai/llms-full.txt) |

### Compute & storage

| Capability | Status | Evidence |
| --- | --- | --- |
| Cloud-init / ignition config | Not supported | "No advertised cloud-init-config capability found in the landing page, complete docs or SDK README; not proof of impossibility." [source](https://docs.isorun.ai/llms-full.txt) |
| Desktop / computer-use sandbox | Supported | "Chromium with CDP and a live noVNC desktop inside a microVM." [source](https://docs.isorun.ai/sandboxes/computer-use-vnc) |
| GPU compute | Not supported | "No advertised gpu capability found in the landing page, complete docs or SDK README; not proof of impossibility." [source](https://docs.isorun.ai/llms-full.txt) |
| Live-state (memory) snapshots | Supported | "Background processes the user started before hibernation are still running at the same PIDs after resume." [source](https://docs.isorun.ai/sandboxes/lifecycle) |
| Multi-region | Supported | "the organization is scoped to a region (US or EU)." [source](https://docs.isorun.ai/getting-started/authentication) |
| Object storage | Not supported | "No advertised object-storage capability found in the landing page, complete docs or SDK README; not proof of impossibility." [source](https://docs.isorun.ai/llms-full.txt) |
| Persistent disk | Supported | "Attach a durable persistent disk to a sandbox." [source](https://docs.isorun.ai/sandboxes/persistent-storage) |
| Sandbox templates / custom images | Supported | "First boot pulls and builds; every subsequent boot is fast." [source](https://docs.isorun.ai/sandboxes/any-oci-image) |
| Scale to zero | Supported | "Keep a workspace around at zero idle cost." [source](https://docs.isorun.ai/sandboxes/lifecycle) |
| Selectable isolation runtime | Not supported | "No advertised selectable-isolation-runtime capability found in the landing page, complete docs or SDK README; not proof of impossibility." [source](https://docs.isorun.ai/llms-full.txt) |
| Snapshots / forking | Supported | "Clone its filesystem, memory, and processes" [source](https://docs.isorun.ai/sandboxes/checkpoints-and-rollback) |

### Data

| Capability | Status | Evidence |
| --- | --- | --- |
| Database branching | Not supported | "No advertised database-branching capability found in the landing page, complete docs or SDK README; not proof of impossibility." [source](https://docs.isorun.ai/llms-full.txt) |
| Ephemeral instant DB (no-signup) | Not supported | "No advertised ephemeral-instant-db capability found in the landing page, complete docs or SDK README; not proof of impossibility." [source](https://docs.isorun.ai/llms-full.txt) |
| First-party database | Not supported | "No advertised first-party-db capability found in the landing page, complete docs or SDK README; not proof of impossibility." [source](https://docs.isorun.ai/llms-full.txt) |
| Vector search | Not supported | "No advertised vector-search capability found in the landing page, complete docs or SDK README; not proof of impossibility." [source](https://docs.isorun.ai/llms-full.txt) |

### Platform & operations

| Capability | Status | Evidence |
| --- | --- | --- |
| Managed CI/CD runners | Not supported | "No advertised managed-ci-runners capability found in the landing page, complete docs or SDK README; not proof of impossibility." [source](https://docs.isorun.ai/llms-full.txt) |
| Built-in observability | Supported | "Tamper-evident NDJSON log of every event in a sandbox lifetime." [source](https://docs.isorun.ai/security/audit-trail) |
| Preview environments | Not supported | "No advertised preview-environments capability found in the landing page, complete docs or SDK README; not proof of impossibility." [source](https://docs.isorun.ai/llms-full.txt) |
| Scheduled tasks | Not supported | "No advertised scheduled-tasks capability found in the landing page, complete docs or SDK README; not proof of impossibility." [source](https://docs.isorun.ai/llms-full.txt) |
| Project template marketplace | Not supported | "No advertised template-marketplace capability found in the landing page, complete docs or SDK README; not proof of impossibility." [source](https://docs.isorun.ai/llms-full.txt) |
| Durable workflows | Not supported | "No advertised workflows-durable capability found in the landing page, complete docs or SDK README; not proof of impossibility." [source](https://docs.isorun.ai/llms-full.txt) |

## Agent readiness

### Read: 11 of 11 signals present

11/11 signals (8 full, 3 partial)

- Llms txt: pass — "https://docs.isorun.ai/llms.txt — substantive documentation index."
- Llms full txt: pass — "https://docs.isorun.ai/llms-full.txt — comprehensive 92KB documentation."
- Robots AI policy: partial — "https://isorun.ai/robots.txt — User-agent: * Allow: /, no AI-specific policy."
- JSON LD: pass — "https://isorun.ai/ — SoftwareApplication with description and Offer."
- Sitemap: partial — "https://isorun.ai/sitemap.xml — one URL."
- Meta quality: pass — "https://isorun.ai/ — descriptive title, description and OG metadata."
- Markdown negotiation: partial — "https://docs.isorun.ai/llms-full.txt provides markdown; Accept: text/markdown returned HTML and .md pages 404."
- Content efficiency: pass — "https://isorun.ai/ — visible server-rendered copy exceeds 5% of 16,824-byte HTML."
- Docs discoverable: pass — "https://isorun.ai/ — docs in primary header."
- Pricing machine readable: pass — "https://docs.isorun.ai/getting-started/pricing — structured vCPU/RAM price tables."
- Anti bot: pass — "Public landing/docs/robots/llms fetched without challenges."

### Drive: 10 of 11 signals present

10/11 signals (4 full, 6 partial)

- Public API: pass — "https://docs.isorun.ai/api-reference — documented REST methods, auth and examples."
- Openapi spec: partial — "https://docs.isorun.ai/changelog — OpenAPI 3.1 mentioned; no fetchable linked spec, common paths 404."
- MCP server: pass — "https://docs.isorun.ai/integrations/mcp-server — official installable stdio server."
- SDK packages: partial — "https://github.com/isorun/sdk — one official TypeScript SDK."
- Auth docs: pass — "https://docs.isorun.ai/getting-started/authentication — key creation, rotation, revocation and region routing."
- Agent self serve creds: partial — "https://docs.isorun.ai/getting-started/authentication — dashboard key creation; no programmatic issuance."
- Webhooks: fail — "https://docs.isorun.ai/llms-full.txt — no webhook documentation found."
- CLI tool: pass — "https://docs.isorun.ai/integrations/mcp-server — official isorun-mcp CLI, not a generic deployment CLI."
- Error model: partial — "https://docs.isorun.ai/sdks/typescript — non-2xx throws with HTTP status/body excerpt; no typed JSON error contract documented."
- Rate limit docs: partial — "https://docs.isorun.ai/troubleshooting — 429 and concurrency/capacity advice, no numeric limits/headers."
- Agent config: partial — "https://docs.isorun.ai/integrations/mcp-server — MCP client configuration documented; agents.md and well-known agent absent."

## Coding harnesses

- Cursor (Anysphere) — "Wire into Cursor" [source](https://docs.isorun.ai/integrations/mcp-server)
- Zed Agent (Zed) — "Wire into Zed" [source](https://docs.isorun.ai/integrations/mcp-server)

## Compliance & regions

- SOC 2 Type II: in-progress (scope: hosted) — "SOC 2 Type II (soon)" [source](https://isorun.ai/)
- Regions: US, EU
- Regions note: Organization-scoped US/EU routing, not disclosed city/provider placement. Durable disk blocks use globally distributed Tigris storage.

## Company & presence

- GitHub SDK: https://github.com/isorun/sdk
- Documentation: https://docs.isorun.ai/
- Signup/dashboard: https://app.isorun.ai/

## Nearby in the atlas

- [Agent Safehouse](/products/agent-safehouse.md)
- [Agent Sandbox](/products/agent-sandbox.md)
- [Agent Substrate](/products/agent-substrate.md)
- [Agent37](/products/agent37.md)
- [AgentNest](/products/agentnest.md)
- [Anthropic Sandbox Runtime (srt)](/products/sandbox-runtime.md)

## Method

Facts come from the product's own public pages. Each claim carries its evidence: a quote and the page it came from. We count capabilities rather than grade products, and "Not assessed" means we have not checked, never that the product lacks it.