ArcBox Sandbox
A sandbox that costs nothing to throw away.
Warm-create in ~50 ms, run untrusted code with its own kernel, destroy it on a timer.
A Sandbox is the same isolated machine kept only as long as one job. It restores from a snapshot instead of booting, executes what the agent asks, and disappears — with a TTL so nothing is left running. Nothing is mounted in from anywhere; what you want to keep, you copy out.
- LinuxWaitlist
- WindowsWaitlist
- macOSContact sales
- iOSNot available
- AndroidContact sales
When a Sandbox is the right form.
Tool execution
Run the code an agent wrote, with the network and filesystem it was promised and nothing else.
Evals and RL rollouts
Thousands of identical environments from one snapshot, each destroyed after a single episode.
Untrusted dependencies
Install and run something you have not audited behind a hypervisor boundary, not a namespace.
What happens, in order. The steps a Sandbox goes through, and what each one costs you in time.
- 01Create~50 ms warm · ~22 ms from snapshot
- 02Execrun · exec -t · cp · expose
- 03Destroyon stop, on rm, or on --ttl
From nothing to a machine.
The same verbs as every other form — create, exec, snapshot, destroy.
Full reference in the documentation.
abctl sandbox create --from-image python:3.12 \
--cpus 2 --memory 2g --ttl 900
# sbx_c21e ready in 48 ms
abctl sandbox cp ./eval.py sbx_c21e:/workspace/
abctl sandbox run sbx_c21e -- python /workspace/eval.py
abctl sandbox cp sbx_c21e:/workspace/out.json .
abctl sandbox rm sbx_c21e # or wait for --ttlWhy a Sandbox and not the others. Same machine, same runtime — these are the properties only this form has.
It is disposable
Stop tears down the copy-on-write layer; there is no “resume” — that is what a Computer is for.
It is fast to make
The first create of a shape checkpoints itself; every later create restores that snapshot instead of booting.
It expires
`--ttl` destroys it on schedule, so a forgotten sandbox never becomes a bill.
Where a Sandbox runs today. Waitlist means we write to you when a wave opens; Contact sales means we plan the capacity with you.
| Operating system | Sandbox | How to start |
|---|---|---|
| Linuxx86-64 · arm64 | Waitlist | Join the waitlist |
| WindowsWindows 11 · Server 2022 | Waitlist | Join the waitlist |
| macOSApple silicon hosts | Contact sales | Contact sales |
| iOSSimulator · device lab | Not available | Contact sales |
| AndroidEmulator · x86-64 images | Contact sales | Contact sales |
- Linuxx86-64 · arm64
- Sandbox
- Waitlist
- Start
- Join the waitlist
- WindowsWindows 11 · Server 2022
- Sandbox
- Waitlist
- Start
- Join the waitlist
- macOSApple silicon hosts
- Sandbox
- Contact sales
- Start
- Contact sales
- iOSSimulator · device lab
- Sandbox
- Not available
- Start
- Contact sales
- AndroidEmulator · x86-64 images
- Sandbox
- Contact sales
- Start
- Contact sales
Give your agent a Sandbox.
Linux and Windows open in waves — leave an address. For macOS, iOS, and Android, tell us what you are building.