Deno Sandbox
Deno Sandbox is an SDK for creating and managing isolated Linux microVMs in the cloud on Deno Deploy.
What Deno Sandbox is
Deno Sandbox is an SDK for creating and managing isolated Linux microVMs in the cloud on Deno Deploy. It targets workloads including AI agents, copilots, plugin systems, collaborative IDEs, ephemeral CI runners, smoke tests, user-supplied code, and preview environments. Each sandbox has its own filesystem, network stack, and process tree, isolated at the hypervisor level. Outbound networking is unrestricted by default but can be limited to an allowlist. Secrets remain placeholders inside the sandbox and are substituted only for approved outbound requests. Files are ephemeral unless a volume is mounted; the VM is destroyed and its disk wiped when killed or when its last reference is dropped. Each sandbox can run for up to 30 minutes, with 2 vCPU, 10 GB ephemeral disk, and configurable memory from 768 MB to 4096 MB. The SDK is supported on Deno latest stable, Node.js 24+, and Python 3.10 or later. JavaScript packages are available on npm and JSR, Python on PyPI, and direct access through a REST API. Supported regions are Amsterdam and Chicago. Pro costs $20 a month and includes Sandbox.
Good
- Hypervisor-level isolation gives each sandbox its own environment.
- Outbound connections can be restricted with an allowlist.
- Secrets are substituted only for approved outbound requests.
- Supports SDKs and REST API access.
- Pro includes Sandbox for $20 a month.
Watch out
- Free plan does not include Sandbox.
- Each sandbox has a maximum 30-minute lifetime.
- Default prerelease limit is 5 concurrent sandboxes per organization.
- Only Amsterdam and Chicago are listed as regions.
Who it suits
Deno Sandbox suits developers building workloads that need isolated cloud microVMs, including AI agents, CI runners, or preview environments. It supports JavaScript, TypeScript, Deno, Node.js, and Python workflows through SDKs and a REST API.
Verdict
Deno Sandbox offers isolated, temporary Linux microVMs with configurable networking and several SDK access paths. Note the sandbox lifetime and concurrency limits, and that the listed Free plan excludes Sandbox.
Plans and prices
From Deno Sandbox's own pricing page, checked 30 Sep 2026.
| Plan | Price | What it gives you |
|---|---|---|
| Free | Free | Sandbox not included · 1M requests/month · 10 hr active CPU · $0 /month |
| Deno Sandbox usage | $0.20 a month | CPU time · memory · persistent volume usage · Volume usage: $0.20/GiB-month |
| Pro | $20 a month | Sandbox included · 3 concurrent sandboxes per region · 5 GiB volume storage · $20 /month |
| Builder | $200 a month | Sandbox included · 20 concurrent sandboxes per region · 50 GiB volume storage · $200 /month |
| Enterprise | Priced on request | Custom sandbox concurrency and volume storage · contact sales · Custom |
The facts
Each one read from Deno Sandbox's own pages, with the date it was checked.
What it does
- Compliance
- The Sandbox FAQ says Deno Deploy is SOC2 and ISO27001 certified and says HIPAA BAAs are available for enterprise contracts.checked 30 Sep 2026
- Concurrency limit
- The docs state a default prerelease limit of 5 concurrent sandboxes per organization and invite users to contact Deno for a higher limit.checked 30 Sep 2026
- Connectivity and development
- Sandboxes can expose a dev server over HTTP, provide SSH access, and expose an on-demand VS Code editor.checked 30 Sep 2026
- Isolation
- Each sandbox is a Linux microVM isolated at the hypervisor level with its own filesystem, network stack, and process tree.checked 30 Sep 2026
- Observability
- Commands, HTTP requests, and SSH sessions can be traced in the Deno Deploy dashboard.checked 30 Sep 2026
- Outbound access
- Outbound networking is unrestricted by default, and an allowlist can restrict connections to specified hosts.checked 30 Sep 2026
- Packages and API
- The JavaScript SDK is available on npm and JSR, the Python SDK is on PyPI, and direct API access is available through a REST API.checked 30 Sep 2026
- Regions
- The docs list Amsterdam and Chicago as supported sandbox regions.checked 30 Sep 2026
- Resource limits
- The documented limits include 2 vCPU, 10 GB ephemeral disk, configurable 768 MB to 4096 MB memory, and a maximum 30-minute lifetime per sandbox.checked 30 Sep 2026
- Runtime support
- The SDK is tested and supported on Deno latest stable, Node.js 24+, and Python 3.10 or later.checked 30 Sep 2026
- Secret handling
- Secrets remain placeholders inside the sandbox and are substituted only for outbound requests to approved hosts.checked 30 Sep 2026
- Storage cleanup
- Sandbox files are ephemeral unless a volume is mounted, and the VM is destroyed and its disk wiped when its last reference is dropped or it is killed.checked 30 Sep 2026
- Support
- The pricing page includes community support on every listed plan, email support on Pro, Builder, and Enterprise, and an email support SLA on Enterprise.checked 30 Sep 2026
- Target workloads
- Deno identifies AI agents, copilots, plugin systems, collaborative IDEs, ephemeral CI runners, smoke tests, user supplied code, and preview environments as use cases.checked 30 Sep 2026
- What it is
- Deno Sandbox is an SDK for creating and managing secure, isolated Linux microVMs in the cloud on Deno Deploy.checked 30 Sep 2026
The company
- Headquarters
- San Diego, California, USAchecked 28 Sep 2026