--- title: Daytona slug: daytona url: "https://toolweight.com/tools/daytona" homepage: "https://daytona.io" categories: sandbox-providers last_verified: 2026-11-07 dataset_version: 0738be72 license: CC-BY-4.0 --- # Daytona > Sub-second container sandboxes for agent workloads, from a team that built a dev-env manager. - Started as an open-source dev-env manager, repositioned in 2025 as an agent sandbox runtime - Markets the most aggressive boot numbers, backed by snapshot images and declarative builds - Sandboxes are Docker/OCI containers on a shared host kernel, not microVMs; Kata or Sysbox are opt-in - Closed its source in June 2026; the old AGPL repo stays public but unmaintained ## Identity | | | | --- | --- | | Name | Daytona | | Company | Daytona | | One-liner | Sub-second container sandboxes for agent workloads, from a team that built a dev-env manager. | | Site | https://daytona.io | | Docs | https://www.daytona.io/docs | | Repo | https://github.com/daytonaio/daytona | | Founded | 2023 | | Funding | Seed | | Open source | No | | Licence | Proprietary | | Compared in | 1 | ## Where it is compared ### [Sandbox providers](https://toolweight.com/compare/sandbox-providers) Ranked **#2 of 19** on default weights. | Field | Value | Confidence | Verified | Source | Note | Permalink | | --- | --- | --- | --- | --- | --- | --- | | Cold start | 350ms | Inferred | - | - | Estimate. The 90 ms claim is a container start against a pre-pulled snapshot image, with no guest kernel to boot; add API scheduling and the client round trip. | https://toolweight.com/compare/sandbox-providers#daytona--cold_start_measured | | Cold start (claimed) | 90ms | Vendor-claimed | 2026-01-15 | https://www.daytona.io | Marketed as sub-90 ms sandbox creation. | https://toolweight.com/compare/sandbox-providers#daytona--cold_start_claimed | | Isolation | container | Inferred | 2026-07-23 | https://northflank.com/blog/daytona-vs-e2b-ai-code-execution-sandboxes | Corrected from microvm. Daytona's own docs claim "complete isolation, a dedicated kernel, filesystem, network stack" but name no hypervisor anywhere, and describe the platform as built on OCI/Docker compatibility. Third-party analysis reports Docker/OCI containers sharing the host kernel as the default, with Kata Containers or Sysbox available only when explicitly configured. A sub-90 ms create is itself corroborating: that is container-start territory, not guest-kernel-boot territory. Marked inferred rather than vendor-claimed because it reconciles conflicting sources rather than reading off one. | https://toolweight.com/compare/sandbox-providers#daytona--isolation_tech | | Root in guest | ● | Vendor-claimed | 2026-01-15 | https://www.daytona.io/docs | - | https://toolweight.com/compare/sandbox-providers#daytona--root_access | | Egress control | allowlist | Vendor-claimed | 2026-07-23 | https://www.daytona.io/docs/en/network-limits/ | networkBlockAll gives a zero-egress sandbox and networkAllowList takes per-sandbox destination rules, so this genuinely earns the top rank. Two limits worth knowing: the allow list is IPv4 CIDR blocks only, no domains, unlike Vercel's firewall, and it caps at ten entries; changing policy on a running sandbox is gated to higher tiers. Sourced on re-audit; it was previously an unsourced inference sitting on a weight-9 preset field. | https://toolweight.com/compare/sandbox-providers#daytona--egress_control | | Max runtime | 24h | Inferred | - | - | No hard published ceiling; sandboxes stop on a configurable auto-stop interval. | https://toolweight.com/compare/sandbox-providers#daytona--max_runtime | | Persistent FS | ● | Vendor-claimed | 2026-01-15 | https://www.daytona.io/docs | Sandboxes stop and restart with their disk intact. | https://toolweight.com/compare/sandbox-providers#daytona--persistent_fs | | Snapshot & fork | ● | Vendor-claimed | 2026-01-15 | https://www.daytona.io/docs | - | https://toolweight.com/compare/sandbox-providers#daytona--snapshot_fork | | Custom images | ● | Vendor-claimed | 2026-01-15 | https://www.daytona.io/docs | Declarative images or any registry image, pre-built into snapshots. | https://toolweight.com/compare/sandbox-providers#daytona--custom_images | | GPU | ● | Vendor-claimed | 2026-11-07 | https://www.daytona.io/docs/en/gpu-sandboxes.md | - | https://toolweight.com/compare/sandbox-providers#daytona--gpu | | Runtimes | python, javascript-typescript, bash, any-oci-image | Inferred | - | - | - | https://toolweight.com/compare/sandbox-providers#daytona--language_runtimes | | Preview URLs | ● | Vendor-claimed | 2026-01-15 | https://www.daytona.io/docs | - | https://toolweight.com/compare/sandbox-providers#daytona--preview_urls | | Browser inside | ◐ | Inferred | - | - | Computer-use images exist but are less mature than E2B Desktop. | https://toolweight.com/compare/sandbox-providers#daytona--browser_in_sandbox | | File up/download | ● | Vendor-claimed | 2026-01-15 | https://www.daytona.io/docs | - | https://toolweight.com/compare/sandbox-providers#daytona--file_transfer_api | | Sydney region | ○ | Inferred | - | - | US and EU only. | https://toolweight.com/compare/sandbox-providers#daytona--sydney_region | | Concurrent limit | 100 sandboxes | Inferred | - | - | Tier-dependent, raised on request. | https://toolweight.com/compare/sandbox-providers#daytona--max_concurrency | | MCP server | ● | Vendor-claimed | 2026-01-15 | https://www.daytona.io/docs | First-party MCP server covering sandbox lifecycle and exec. | https://toolweight.com/compare/sandbox-providers#daytona--mcp_server | | SDKs | python, typescript, cli | Inferred | - | - | - | https://toolweight.com/compare/sandbox-providers#daytona--sdk_languages | | Streaming output | ● | Vendor-claimed | 2026-01-15 | https://www.daytona.io/docs | - | https://toolweight.com/compare/sandbox-providers#daytona--streaming_stdout | | Price / hour | $0.17/hr | Inferred | 2026-07-23 | https://northflank.com/blog/ai-sandbox-pricing | Converted like every other per-second vendor here: $0.0504/vCPU-hr and $0.0162/GiB-hr give 2 × 0.0504 + 4 × 0.0162 = $0.166. Disk is billed separately and excluded, as it is for everyone. Caveat on the sourcing: Daytona's own pricing page is JavaScript-rendered and could not be read directly, so these rates come from third-party comparisons that agree with each other, identical, as it happens, to E2B's published rates. Treat the figure as a good estimate rather than a quote, and re-check it at the vendor before budgeting. | https://toolweight.com/compare/sandbox-providers#daytona--price_per_hour | | Meter | per-second | Vendor-claimed | 2026-01-15 | https://www.daytona.io/pricing | - | https://toolweight.com/compare/sandbox-providers#daytona--billing_granularity | | Idle cost | storage-only | Inferred | - | - | Stopped sandboxes bill disk only. | https://toolweight.com/compare/sandbox-providers#daytona--idle_billing | | GitHub stars | 71,000 | Community-reported | 2026-11-07 | https://github.com/daytonaio/daytona | daytonaio/daytona, 71.4k rounded to the nearest thousand. | https://toolweight.com/compare/sandbox-providers#daytona--github_stars | | Funding | seed | Community-reported | - | - | - | https://toolweight.com/compare/sandbox-providers#daytona--funding_stage | | Shipped | 2025 | Inferred | - | - | Company is older; the sandbox product dates from the 2025 repositioning. | https://toolweight.com/compare/sandbox-providers#daytona--launched | | Positioning | Secure, elastic infrastructure for running AI-generated code. | Inferred | - | - | - | https://toolweight.com/compare/sandbox-providers#daytona--positioning | **Verdict.** E2B's most credible ergonomics challenger with the best MCP story, but shared-kernel containers make it wrong for untrusted code. ## Alternatives - [Blaxel](https://toolweight.com/tools/blaxel), Agent-first cloud claiming ~25 ms microVM boots from snapshots. - [boat](https://toolweight.com/tools/boat), Persistent Ubuntu VMs for agents with SSH, Docker and disk-level fork, billed per second. - [Cloudflare Sandbox](https://toolweight.com/tools/cloudflare-sandbox), Container sandboxes driven from a Worker, addressed through Durable Objects. - [CodeSandbox SDK](https://toolweight.com/tools/codesandbox-sdk), Firecracker VMs with memory snapshots, from the online IDE, now owned by Together AI. - [Self-hosted Firecracker](https://toolweight.com/tools/diy-firecracker), The baseline: Firecracker on your own metal, plus every hard part you now own. - [E2B](https://toolweight.com/tools/e2b), Open-source Firecracker sandboxes with Python and TypeScript SDKs for AI agents. - [exe.dev](https://toolweight.com/tools/exe-dev), Persistent VMs you SSH into, with root, apt and systemd, on a flat monthly plan. - [Fly.io Machines](https://toolweight.com/tools/fly-machines), Raw Firecracker microVMs with a REST API, durable volumes and 35+ regions. - [Freestyle](https://toolweight.com/tools/freestyle), Run untrusted JavaScript and full dev servers, with git hosting and domains built in. - [GitHub Codespaces](https://toolweight.com/tools/github-codespaces), Devcontainer-backed cloud VMs built for humans, occasionally repurposed for agents. - [Islo](https://toolweight.com/tools/islo), Per-agent isolated cloud sandboxes with enterprise policy controls, from Incredibuild. - [Modal](https://toolweight.com/tools/modal), Serverless Python compute with a Sandbox API bolted onto a GPU-first platform. ## Logo & brand colours SVG files: https://toolweight.com/teams/daytona/logo.svg and https://toolweight.com/teams/daytona/mono.svg. JSON: https://toolweight.com/api/v1/brands/daytona. | Hex | oklch | | --- | --- | | #ffffff | oklch(100.0% 0.000 0.0) | ## Licence and attribution Data from Toolweight (https://toolweight.com), licensed CC-BY-4.0. - Licence: [CC-BY-4.0](https://creativecommons.org/licenses/by/4.0/) - Canonical HTML: https://toolweight.com/tools/daytona - Machine-readable: https://toolweight.com/tools/daytona.md · https://toolweight.com/api/v1 · https://toolweight.com/mcp - Toolweight takes no affiliate revenue and sells no placements.