---
title: "“For my company, I want to build and offer sandboxes on top…” — places to run it · Where Do I Run This"
description: "Where to run: For my company, I want to build and offer sandboxes on top of my k8s infrastructure. What can I use & reuse to build… Ranked picks from the atlas: Cube Sandbox (CubeSandbox), Agent Substrate, kagent."
canonical_url: "https://wheredoirunthis.com/results/85be0742-d68b-411e-bf14-24c866314b73"
meta:
  "og:description": "Where to run: For my company, I want to build and offer sandboxes on top of my k8s infrastructure. What can I use & reuse to build… Ranked picks from the atlas: Cube Sandbox (CubeSandbox), Agent Substrate, kagent."
  "og:image": "https://wheredoirunthis.com/_og/d/c_WdirtDefault%2Cp_Ii9yZXN1bHRzLzg1YmUwNzQyLWQ2OGItNDExZS1iZjE0LTI0Yzg2NjMxNGI3MyI%2Cs_Bs5S2tpXfji4p1KC.png"
  "og:image:height": "630"
  "og:image:type": image/png
  "og:image:width": "1200"
  "og:title": "“For my company, I want to build and offer sandboxes on top…” — places to run it"
  "twitter:description": "Where to run: For my company, I want to build and offer sandboxes on top of my k8s infrastructure. What can I use & reuse to build… Ranked picks from the atlas: Cube Sandbox (CubeSandbox), Agent Substrate, kagent."
  "twitter:image": "https://wheredoirunthis.com/_og/d/c_WdirtDefault%2Cp_Ii9yZXN1bHRzLzg1YmUwNzQyLWQ2OGItNDExZS1iZjE0LTI0Yzg2NjMxNGI3MyI%2Cs_Bs5S2tpXfji4p1KC.png"
  "twitter:title": "“For my company, I want to build and offer sandboxes on top…” — places to run it"
---

> Index of every page on this site: [llms.txt](https://wheredoirunthis.com/llms.txt)

[**Back to the atlas **](https://wheredoirunthis.com/)

Your request · the atlas’s suggestions

# Places to consider.

A ranked starting point, not a promise. Read the fit, check the caveats, and explore the profiles.

## Original request

For my company, I want to build and offer sandboxes on top of my k8s infrastructure. What can I use & reuse to build the sandbox stack.

Saved Oct 9, 2026

This request and its results are public: they may appear on the homepage and in search engines.

1. 01 ## Cube Sandbox (CubeSandbox)Excellent fithigh certainty ### Key takeaway

   Self-hosted Go sandbox service with Kubernetes and Helm deployment and reusable templates. ### **Before you choose **
   - Whether persistent volumes, snapshot density or isolation behaviour meet your sandbox requirements at your scale, since exact resource limits depend on the operator's hardware and some features such as observability and desktop sandbox are only partial.<details><summary>**Why it fits your request **</summary>

Cube Sandbox states self-host support plus kubernetes, helm and terraform deployment, directly matching your existing Kubernetes infrastructure.

   Its sandbox-templates and container-image interfaces give reusable building blocks for a sandbox stack, and Apache-2.0 licensing fits an any-budget self-hosted build.</details>

[**Explore Cube Sandbox (CubeSandbox) profile **](https://wheredoirunthis.com/products/cubesandbox)
2. 02 ## Agent SubstrateExcellent fitmedium certainty ### Key takeaway

   Self-hosted actor runtime with Kubernetes deployment and ActorTemplate-based reusable sandboxes. ### **Before you choose **
   - Whether the Kubernetes install path suits your cluster, since egress policies are not supported on GKE's build yet and several capabilities such as SDKs, filesystem API and private networking are only partial.
   - Verify snapshot storage requirements.<details><summary>**Why it fits your request **</summary>

Agent Substrate states self-host with kubernetes and source-build, and describes ActorTemplates and golden snapshots that form reusable components for a sandbox stack.

   Apache-2.0 covers your budget, and the runtime targets millions of sandboxes with suspend/resume.</details>

[**Explore Agent Substrate profile **](https://wheredoirunthis.com/products/agent-substrate)
3. 03 ## kagentExcellent fitmedium certainty ### Key takeaway

   Kubernetes-native agent platform with Helm install and reusable sandbox and skill templates. ### **Before you choose **
   - Because productType is listed as unknown, confirm the tool is the kind of sandbox platform you expect.
   - Also check deploy coverage for your cluster, and that partial capabilities such as persistent disk, SDK and secrets management meet your needs.<details><summary>**Why it fits your request **</summary>

kagent states self-host with helm, kubernetes and binary, matching Kubernetes infrastructure, and offers sandbox templates, agent skills and snapshots as reusable sandbox stack components.

   Apache-2.0 fits any budget and it needs a PostgreSQL dependency.</details>

[**Explore kagent profile **](https://wheredoirunthis.com/products/kagent)
4. 04 ## AX (Agent Executor)Excellent fitmedium certainty ### Key takeaway

   Self-hosted task runtime on Kubernetes reusing Agent Substrate sandbox templates. ### **Before you choose **
   - AX documents no attachable volumes, so confirm how your sandbox stack stores data beyond the in-sandbox workspace and Substrate checkpoints.
   - Egress and credential injection are inherited from Substrate rather than configured in AX, and forking is roadmap.<details><summary>**Why it fits your request **</summary>

AX states self-host via kubernetes and source-build, and reuses Agent Substrate, so sandboxes arrive as reusable templates and checkpoints.

   Apache-2.0 fits any budget, and tasks cover coding agents, notebooks, browsers and evals.</details>

[**Explore AX (Agent Executor) profile **](https://wheredoirunthis.com/products/ax)
5. 05 ## Agent SandboxExcellent fitmedium certainty ### Key takeaway

   Kubernetes operator for stateful sandboxes, installed via Helm with reusable templates. ### **Before you choose **
   - Snapshot support is conditional on GKE PodSnapshot rather than guaranteed everywhere, egress controls depend on an operator-configured NetworkPolicy and CNI, and several features such as secrets management and scale-to-zero are only partial.<details><summary>**Why it fits your request **</summary>

Agent Sandbox is a self-hosted Kubernetes operator installed with helm, matching your existing cluster, and provides sandbox templates plus persistent volume claims as reusable stack components.

   Apache-2.0 fits any budget, with Python, Go and TypeScript SDKs.</details>

[**Explore Agent Sandbox profile **](https://wheredoirunthis.com/products/agent-sandbox)

```json
{"@context":"https://schema.org","@graph":[{"@id":"https://wheredoirunthis.com/#website","@type":"WebSite","description":"The independent spec sheet for places to run code, and the code your agents write.","name":"Where Do I Run This","url":"https://wheredoirunthis.com/","publisher":{"@id":"https://wheredoirunthis.com/#identity"}},{"@id":"https://wheredoirunthis.com/results/85be0742-d68b-411e-bf14-24c866314b73#webpage","@type":"WebPage","description":"Where to run: For my company, I want to build and offer sandboxes on top of my k8s infrastructure. What can I use & reuse to build… Ranked picks from the atlas: Cube Sandbox (CubeSandbox), Agent Substrate, kagent.","name":"“For my company, I want to build and offer sandboxes on top…” — places to run it","url":"https://wheredoirunthis.com/results/85be0742-d68b-411e-bf14-24c866314b73","isPartOf":{"@id":"https://wheredoirunthis.com/#website"},"potentialAction":[{"@type":"ReadAction","target":["https://wheredoirunthis.com/results/85be0742-d68b-411e-bf14-24c866314b73"]}],"primaryImageOfPage":{"@id":"https://wheredoirunthis.com/#logo"}},{"@id":"https://wheredoirunthis.com/#identity","@type":"Organization","name":"Where Do I Run This","url":"https://wheredoirunthis.com","logo":{"@id":"https://wheredoirunthis.com/#logo"}},{"@id":"https://wheredoirunthis.com/#logo","@type":"ImageObject","caption":"Where Do I Run This","contentUrl":"https://wheredoirunthis.com/icon-512.png","inLanguage":"en","url":"https://wheredoirunthis.com/icon-512.png"}]}
```