简介

<p align="center"> <img src="docs/assets/cube-sandbox-logo.png" alt="Cube Sandbox Logo" width="140" /> </p>

CubeSandbox

<p align="center"> <strong>Instant, Concurrent, Secure & Lightweight Sandbox Service for AI Agents</strong> </p>

<p align="center"> <a href="https://github.com/tencentcloud/CubeSandbox/stargazers"><img src="https://img.shields.io/github/stars/tencentcloud/cubesandbox?style=social" alt="GitHub Stars" /></a> <a href="https://github.com/tencentcloud/CubeSandbox/issues"><img src="https://img.shields.io/github/issues/tencentcloud/cubesandbox" alt="GitHub Issues" /></a> <a href="./LICENSE"><img src="https://img.shields.io/badge/License-Apache_2.0-green" alt="Apache 2.0 License" /></a> <a href="./CONTRIBUTING.md"><img src="https://img.shields.io/badge/PRs-welcome-brightgreen" alt="PRs Welcome" /></a> </p>

<p align="center"> <img src="https://img.shields.io/badge/⚡_Startup-Tens_of_ms-blue" alt="Fast startup" /> <img src="https://img.shields.io/badge/🔒_Isolation-Hardware_Level-critical" alt="Hardware-level isolation" /> <img src="https://img.shields.io/badge/🔌_API-E2B_Compatible-blueviolet" alt="E2B compatible" /> <img src="https://img.shields.io/badge/📦_Deploy-High_Concurrency·High_Density-orange" alt="High concurrency & high density" /> </p>

<p align="center"> <a href="./README_zh.md"><strong>中文文档</strong></a> · <a href="./docs/guide/quickstart.md"><strong>Quick Start</strong></a> · <a href="./docs/index.md"><strong>Documentation</strong></a> · <a href="./docs/changelog.md"><strong>Changelog</strong></a> · <a href="https://x.com/CubeSandbox_AI"><strong>X(Twitter)</strong></a> </p>

---

Cube Sandbox is a high-performance, out-of-the-box secure sandbox service built on RustVMM and KVM. It supports both single-node deployment and easy scaling to multi-node clusters. It is compatible with the E2B SDK and can create a hardware-isolated, fully serviceable sandbox in under 60ms with less than 5MB of memory overhead.

<p align="center"> <img src="./docs/assets/readme_speed_en_1.png" width="400" /> <img src="./docs/assets/readme_overhead_en_1.png" width="400" /> </p>

Core Highlights

• Blazing-fast cold start: Built on resource pool pre-provisioning and snapshot cloning technology, skipping time-consuming initialization entirely. Average end-to-end cold start time for a fully serviceable sandbox is < 60ms.
• High-density deployment on a single node: Extreme memory reuse via CoW technology combined with a Rust-rebuilt, aggressively trimmed runtime keeps per-instance memory overhead below 5MB — run thousands of Agents on a single machine.
• True kernel-level isolation: No more unsafe Docker shared-kernel (Namespace) hacks. Each Agent runs with its own dedicated Guest OS kernel, eliminating container escape risks and enabling safe execution of any LLM-generated code.
• Zero-cost migration (E2B drop-in replacement): Natively compatible with the E2B SDK interface. Just swap one URL environment variable — no business logic changes needed — to migrate from expensive closed-source sandboxes to free Cube Sandbox with better performance.
• Network security: CubeVS, powered by eBPF, enforces strict inter-sandbox network isolation at the kernel level with fine-grained egress traffic filtering policies.
• Ready to use out of the box: One-click deployment with support for both single-node and cluster setups.
• Event-level snapshot rollback (coming soon): High-frequency snapshot rollback at millisecond granularity, enabling rapid fork-based exploration environments from any saved state.
• Production-ready: Cube Sandbox has been validated at scale in Tencent Cloud production environments, proven stable and reliable.