Your request · the atlas’s suggestions
Places to consider.
A ranked starting point, not a promise. Read the fit, check the caveats, and explore the profiles.
Original request
For my company, I want to build and offer sandboxes on top of my k8s infrastructure. What can I use & reuse to build the sandbox stack.
Saved Oct 9, 2026
This request and its results are public: they may appear on the homepage and in search engines.
- 01
Cube Sandbox (CubeSandbox)
Excellent fithigh certaintyKey takeaway
Self-hosted Go sandbox service with Kubernetes and Helm deployment and reusable templates.
Before you choose
- Whether persistent volumes, snapshot density or isolation behaviour meet your sandbox requirements at your scale, since exact resource limits depend on the operator's hardware and some features such as observability and desktop sandbox are only partial.
Explore Cube Sandbox (CubeSandbox) profileWhy it fits your request
Cube Sandbox states self-host support plus kubernetes, helm and terraform deployment, directly matching your existing Kubernetes infrastructure.
Its sandbox-templates and container-image interfaces give reusable building blocks for a sandbox stack, and Apache-2.0 licensing fits an any-budget self-hosted build.
- 02

Agent Substrate
Excellent fitmedium certaintyKey takeaway
Self-hosted actor runtime with Kubernetes deployment and ActorTemplate-based reusable sandboxes.
Before you choose
- Whether the Kubernetes install path suits your cluster, since egress policies are not supported on GKE's build yet and several capabilities such as SDKs, filesystem API and private networking are only partial.
- Verify snapshot storage requirements.
Explore Agent Substrate profileWhy it fits your request
Agent Substrate states self-host with kubernetes and source-build, and describes ActorTemplates and golden snapshots that form reusable components for a sandbox stack.
Apache-2.0 covers your budget, and the runtime targets millions of sandboxes with suspend/resume.
- 03

kagent
Excellent fitmedium certaintyKey takeaway
Kubernetes-native agent platform with Helm install and reusable sandbox and skill templates.
Before you choose
- Because productType is listed as unknown, confirm the tool is the kind of sandbox platform you expect.
- Also check deploy coverage for your cluster, and that partial capabilities such as persistent disk, SDK and secrets management meet your needs.
Explore kagent profileWhy it fits your request
kagent states self-host with helm, kubernetes and binary, matching Kubernetes infrastructure, and offers sandbox templates, agent skills and snapshots as reusable sandbox stack components.
Apache-2.0 fits any budget and it needs a PostgreSQL dependency.
- 04
AX (Agent Executor)
Excellent fitmedium certaintyKey takeaway
Self-hosted task runtime on Kubernetes reusing Agent Substrate sandbox templates.
Before you choose
- AX documents no attachable volumes, so confirm how your sandbox stack stores data beyond the in-sandbox workspace and Substrate checkpoints.
- Egress and credential injection are inherited from Substrate rather than configured in AX, and forking is roadmap.
Explore AX (Agent Executor) profileWhy it fits your request
AX states self-host via kubernetes and source-build, and reuses Agent Substrate, so sandboxes arrive as reusable templates and checkpoints.
Apache-2.0 fits any budget, and tasks cover coding agents, notebooks, browsers and evals.
- 05
Agent Sandbox
Excellent fitmedium certaintyKey takeaway
Kubernetes operator for stateful sandboxes, installed via Helm with reusable templates.
Before you choose
- Snapshot support is conditional on GKE PodSnapshot rather than guaranteed everywhere, egress controls depend on an operator-configured NetworkPolicy and CNI, and several features such as secrets management and scale-to-zero are only partial.
Explore Agent Sandbox profileWhy it fits your request
Agent Sandbox is a self-hosted Kubernetes operator installed with helm, matching your existing cluster, and provides sandbox templates plus persistent volume claims as reusable stack components.
Apache-2.0 fits any budget, with Python, Go and TypeScript SDKs.