firecracker

Perplexity open-sources SPACE (Sandboxed Platform for Agentic Code Execution), an orchestrator that runs agent code in isolated Firecracker microVMs with an HTTP API for sandbox lifecycle management, warm pools, snapshots, and E2B compatibility.

一条关于 E2B 创始人 Vasek 发表"Sandboxes are dead"文章的分析线程，剖析了这家 AI 沙箱市场领导者为何要主动淘汰自己的品类，转向"agent 驱动的私有云"以应对开源自我蚕食、计费模式劣势和竞品夹击。

Perplexity 开源了其 Computer 背后的沙箱平台 SPACE（Apache 2.0），为每个 Agent 任务提供独立的 Firecracker microVM，并在 VM 外部管控凭证与出站网络流量，还包含 E2B 兼容层，这对构建 Agent harness 的开发者意义重大。

Cloudflare disclosed and fully remediated a cross-tenant data exposure vulnerability in Cloudflare Containers (and Sandboxes) reported by researcher Oren Yomtov, where dm-thin skip_block_zeroing allowed previously-used 64 KiB blocks to retain residual data from other containers on the same multi-tenant host.

E2B introduces E2B Embed, an open-source (Apache-2.0) way to package the E2B Runtime and run Firecracker-based sandboxes inside a customer's own environment, aimed at regulated industries and government clients requiring data residency. It offers Docker Compose, Terraform (AWS/GCP), and Kubernetes deployment options with the same Python/JavaScript SDKs, a dashboard, and OpenTelemetry export.

Netlify rebuilt Edge Functions infrastructure on Firecracker MicroVMs (with Unikraft), cutting warm-invocation latency from 25–40ms to ~5–6ms at p50 — roughly 5x faster — while improving security and reliability without changing how developers write functions.

jurniti provides always-on AI agents hosted in secure Firecracker microVMs with KVM hardware isolation, launching on Product Hunt with pricing from $25 per month.

The blog post details the reverse-engineering of Claude Code Web's runtime environment, revealing it uses a Firecracker MicroVM and uncovering Anthropic's undocumented application hosting platform.

The tweet discusses the challenges of running Firecracker on M-series Macs and references Encore's blog post about rebuilding their Linux microVM stack for Apple Silicon, sharing their own experience with nested virtualization.

This article debunks the misconception that AWS Fargate uses Firecracker microVMs for container isolation, clarifying that it does not despite marketing implications, and discusses operational trade-offs for users.

Vercel is launching a two-week HackerOne program offering up to $1 million in rewards for researchers who can escape their Vercel Sandbox, testing the isolation security of their microVM-based system.

forkd is a micro-virtual machine runtime based on Firecracker and KVM, allowing the forking of 100 child VMs in about 100 milliseconds, suitable for parallel exploration scenarios in AI Agents. Currently in Alpha stage, it provides a fast BRANCH feature for snapshotting and forking virtual machines while running.

The author is developing an isolated execution environment for AI agents using Firecracker microVMs, featuring networking isolation, resource limits, and production-grade enhancements.

OpenClawMachines is an open-source platform for running OpenClaw AI agents in hardware-isolated Firecracker microVMs on your own infrastructure, with a control plane, host agent, and LLM proxy.

This article discusses the differences between Agent execution and general code execution and recommends two sandbox solutions: E2B (based on Firecracker) and OpenSandbox (based on Docker), which are suitable for production-grade and private deployment scenarios, respectively.

Adapt runs each user conversation with its AI agent on an isolated VM sandbox where the model has full root access to execute arbitrary code, using gVisor and Firecracker for security and scalability.

AWS Lambda announces MicroVMs, a new serverless compute primitive that provides isolated, stateful execution environments with VM-level isolation and near-instant launch, powered by Firecracker.

Browser Use Cloud rebuilt their infrastructure using Firecracker to reduce browser session costs from $0.06 to $0.02 per hour and achieve sub-second start times, while maintaining isolation and scalability.

Browser Use rebuilt its cloud browser infrastructure using Firecracker microVMs on regular EC2, achieving sub-400ms cold starts and reducing costs from $0.06 to $0.02 per browser hour with improved isolation and autoscaling.

Browser Use launches a new browser infrastructure service featuring subsecond cold starts, lower cost at $0.02/h, and unlimited scaling, now live for developers.