--- title: Cloudflare Sandbox slug: cloudflare-sandbox url: "https://toolweight.com/tools/cloudflare-sandbox" homepage: "https://developers.cloudflare.com/sandbox/" categories: sandbox-providers last_verified: 2026-11-07 dataset_version: 0738be72 license: CC-BY-4.0 --- # Cloudflare Sandbox > Container sandboxes driven from a Worker, addressed through Durable Objects. - Runs containers on Cloudflare Containers, each with a Durable Object as its control plane - Sandboxes are addressable, stateful and callable directly from Worker code - Billed in 10 ms increments, stopping when the container sleeps - Lowest-friction if your app lives on Workers, largely irrelevant if it does not ## Identity | | | | --- | --- | | Name | Cloudflare Sandbox | | Company | Cloudflare | | One-liner | Container sandboxes driven from a Worker, addressed through Durable Objects. | | Site | https://developers.cloudflare.com/sandbox/ | | Docs | https://developers.cloudflare.com/containers/ | | Repo | https://github.com/cloudflare/sandbox-sdk | | Founded | 2009 | | Funding | Public | | Open source | Yes | | Licence | MIT | | Compared in | 1 | ## Where it is compared ### [Sandbox providers](https://toolweight.com/compare/sandbox-providers) Ranked **#17 of 19** on default weights. | Field | Value | Confidence | Verified | Source | Note | Permalink | | --- | --- | --- | --- | --- | --- | --- | | Cold start | 3s | Inferred | - | - | Estimate for a cold container instance. A warm instance behind a Durable Object responds in milliseconds; the first request after scale-to-zero is the expensive one. | https://toolweight.com/compare/sandbox-providers#cloudflare-sandbox--cold_start_measured | | Cold start (claimed) | - | Unknown | - | - | Cloudflare publishes no single cold-start figure for Containers, which is unusually honest of them. | https://toolweight.com/compare/sandbox-providers#cloudflare-sandbox--cold_start_claimed | | Isolation | container | Vendor-claimed | 2026-01-15 | https://developers.cloudflare.com/containers/ | Containers on Cloudflare's own runtime, addressed by a Durable Object. | https://toolweight.com/compare/sandbox-providers#cloudflare-sandbox--isolation_tech | | Root in guest | ● | Inferred | - | - | Root inside the container image. | https://toolweight.com/compare/sandbox-providers#cloudflare-sandbox--root_access | | Egress control | allowlist | Inferred | - | - | Outbound traffic routes through the Worker, so you can gate it in code, the most programmable egress control here. | https://toolweight.com/compare/sandbox-providers#cloudflare-sandbox--egress_control | | Max runtime | 1h | Inferred | - | - | Instances sleep after a configurable inactivity timeout; long-lived processes are not the intended shape. | https://toolweight.com/compare/sandbox-providers#cloudflare-sandbox--max_runtime | | Persistent FS | ○ | Inferred | - | - | Container disk is ephemeral; durable state belongs in the Durable Object, R2 or D1. | https://toolweight.com/compare/sandbox-providers#cloudflare-sandbox--persistent_fs | | Snapshot & fork | ○ | Inferred | - | - | - | https://toolweight.com/compare/sandbox-providers#cloudflare-sandbox--snapshot_fork | | Custom images | ● | Vendor-claimed | 2026-01-15 | https://developers.cloudflare.com/containers/ | Your Dockerfile, pushed to Cloudflare's registry. | https://toolweight.com/compare/sandbox-providers#cloudflare-sandbox--custom_images | | GPU | ○ | Inferred | - | - | Workers AI is a separate product. | https://toolweight.com/compare/sandbox-providers#cloudflare-sandbox--gpu | | Runtimes | any-oci-image | Inferred | - | - | - | https://toolweight.com/compare/sandbox-providers#cloudflare-sandbox--language_runtimes | | Preview URLs | ● | Vendor-claimed | 2026-01-15 | https://developers.cloudflare.com/sandbox/ | Ports are exposed through the Worker. | https://toolweight.com/compare/sandbox-providers#cloudflare-sandbox--preview_urls | | Browser inside | ◐ | Inferred | - | - | Cloudflare Browser Rendering is a separate product; you can also run Chromium in the container. | https://toolweight.com/compare/sandbox-providers#cloudflare-sandbox--browser_in_sandbox | | File up/download | ● | Vendor-claimed | 2026-01-15 | https://developers.cloudflare.com/sandbox/ | - | https://toolweight.com/compare/sandbox-providers#cloudflare-sandbox--file_transfer_api | | Sydney region | ◐ | Inferred | - | - | Cloudflare has Sydney presence, but container placement follows their topology rather than a region you choose. | https://toolweight.com/compare/sandbox-providers#cloudflare-sandbox--sydney_region | | Concurrent limit | 100 sandboxes | Inferred | - | - | Account-level container instance limits, raised on request. | https://toolweight.com/compare/sandbox-providers#cloudflare-sandbox--max_concurrency | | MCP server | ◐ | Inferred | - | - | Cloudflare invests heavily in MCP across its platform; the sandbox-specific server is less established than the SDK. | https://toolweight.com/compare/sandbox-providers#cloudflare-sandbox--mcp_server | | SDKs | typescript | Inferred | - | - | - | https://toolweight.com/compare/sandbox-providers#cloudflare-sandbox--sdk_languages | | Streaming output | ● | Vendor-claimed | 2026-01-15 | https://developers.cloudflare.com/sandbox/ | - | https://toolweight.com/compare/sandbox-providers#cloudflare-sandbox--streaming_stdout | | Price / hour | $0.18/hr | Inferred | - | - | Approximate: 2 vCPU + 4 GiB at published Containers vCPU and memory rates, before the required paid Workers plan. | https://toolweight.com/compare/sandbox-providers#cloudflare-sandbox--price_per_hour | | Meter | per-10ms | Vendor-claimed | 2026-01-15 | https://developers.cloudflare.com/containers/pricing/ | The finest meter in this roster. | https://toolweight.com/compare/sandbox-providers#cloudflare-sandbox--billing_granularity | | Idle cost | free-when-stopped | Vendor-claimed | 2026-01-15 | https://developers.cloudflare.com/containers/pricing/ | Billing stops when the instance sleeps. | https://toolweight.com/compare/sandbox-providers#cloudflare-sandbox--idle_billing | | GitHub stars | 1,000 | Community-reported | 2026-11-07 | https://github.com/cloudflare/sandbox-sdk | cloudflare/sandbox-sdk, 1.2k rounded to the nearest thousand. | https://toolweight.com/compare/sandbox-providers#cloudflare-sandbox--github_stars | | Funding | public | Vendor-claimed | 2026-01-15 | https://cloudflare.net | - | https://toolweight.com/compare/sandbox-providers#cloudflare-sandbox--funding_stage | | Shipped | 2025 | Vendor-claimed | 2026-01-15 | https://blog.cloudflare.com/containers-are-available-in-public-beta-for-simple-global-and-programmable/ | - | https://toolweight.com/compare/sandbox-providers#cloudflare-sandbox--launched | | Positioning | Containers you can call from a Worker, with a Durable Object as the control plane. | Inferred | - | - | - | https://toolweight.com/compare/sandbox-providers#cloudflare-sandbox--positioning | **Verdict.** An addressable sandbox object in your app, worth it on Workers but too slow to migrate to. ## Alternatives - [Blaxel](https://toolweight.com/tools/blaxel), Agent-first cloud claiming ~25 ms microVM boots from snapshots. - [boat](https://toolweight.com/tools/boat), Persistent Ubuntu VMs for agents with SSH, Docker and disk-level fork, billed per second. - [CodeSandbox SDK](https://toolweight.com/tools/codesandbox-sdk), Firecracker VMs with memory snapshots, from the online IDE, now owned by Together AI. - [Daytona](https://toolweight.com/tools/daytona), Sub-second container sandboxes for agent workloads, from a team that built a dev-env manager. - [Self-hosted Firecracker](https://toolweight.com/tools/diy-firecracker), The baseline: Firecracker on your own metal, plus every hard part you now own. - [E2B](https://toolweight.com/tools/e2b), Open-source Firecracker sandboxes with Python and TypeScript SDKs for AI agents. - [exe.dev](https://toolweight.com/tools/exe-dev), Persistent VMs you SSH into, with root, apt and systemd, on a flat monthly plan. - [Fly.io Machines](https://toolweight.com/tools/fly-machines), Raw Firecracker microVMs with a REST API, durable volumes and 35+ regions. - [Freestyle](https://toolweight.com/tools/freestyle), Run untrusted JavaScript and full dev servers, with git hosting and domains built in. - [GitHub Codespaces](https://toolweight.com/tools/github-codespaces), Devcontainer-backed cloud VMs built for humans, occasionally repurposed for agents. - [Islo](https://toolweight.com/tools/islo), Per-agent isolated cloud sandboxes with enterprise policy controls, from Incredibuild. - [Modal](https://toolweight.com/tools/modal), Serverless Python compute with a Sandbox API bolted onto a GPU-first platform. ## Licence and attribution Data from Toolweight (https://toolweight.com), licensed CC-BY-4.0. - Licence: [CC-BY-4.0](https://creativecommons.org/licenses/by/4.0/) - Canonical HTML: https://toolweight.com/tools/cloudflare-sandbox - Machine-readable: https://toolweight.com/tools/cloudflare-sandbox.md · https://toolweight.com/api/v1 · https://toolweight.com/mcp - Toolweight takes no affiliate revenue and sells no placements.