back to microsandbox

compare

microsandbox vs cloudflare sandboxes

reviewed

microsandbox runs the microVM on your machine and embeds in your application. Cloudflare Sandboxes connects managed VM-isolated containers to Workers and Durable Objects. [1][2][24][26]

both provide a separate guest kernel in production. local development differs: Cloudflare uses a Docker-compatible engine with Wrangler; microsandbox runs its own microVM runtime on macOS, Linux, and Windows. [1][3][26]

microsandbox includes full local checkpoints and managed settings for employee devices. its hosted cloud is available by request during private beta. [20][21][22]

microsandbox
local + cloud
cloudflare sandboxes
Workers-integrated sandboxes
runtime ownership
apache 2.0 runtime and SDKs [26]
Apache-2.0 Sandbox SDK; production execution on Cloudflare Containers [2][6]
production isolation
microVM per sandbox [24]
separate VM per sandbox container [1]
local execution
macOS · Linux · Windows [26]
Wrangler and a Docker-compatible engine [3]
integration
rust · typescript · python · go · ruby · CLI [25][26]
TypeScript SDK integrated with Workers and Durable Objects [2]
saved state
local snapshots save disk state, or disk, memory, and running processes with --full. cloud currently supports disk snapshots from stopped persistent sandboxes and disk restore. [21]
directory backups in R2; separate bucket mounts for persistent data [4]
employee devices
Jamf or Intune-managed settings; local administrators can replace the policy or runtime [22]
production application deployed to Cloudflare [2]
credentials
placeholder in the guest; host-side substitution for allowed destinations in supported requests. an allowed endpoint can still expose the real secret. [28]
Worker outbound handlers can inject credentials outside the sandbox [1][7]
pricing
free local runtime · cloud free tier and paid plans [27]
Workers Paid plan; Containers, Workers, and Durable Objects usage charges [2][5]
pick microsandbox

choose microsandbox when

  • you need the VM boundary during local development and offline execution. [23][26]
  • you need full local memory checkpoints, not only saved project files. [21]
  • your application uses Rust, Python, Go, or Ruby as well as TypeScript. [25][26]
pick cloudflare sandboxes

choose cloudflare sandboxes when

  • your application already relies on Workers and Durable Objects. [2]
  • you want Cloudflare to operate the sandbox compute and platform integrations. [2]

01

local development uses different runtimes

Cloudflare’s local toolchain runs containers through Docker. its production service puts each sandbox in its own VM. [1][3] microsandbox runs the microVM locally, so developers can exercise that boundary without deploying a Worker. [26]

02

saving files or saving a running process

Cloudflare’s documented backup flow archives a directory to R2 and restores that tree later. it is not a memory checkpoint. [4] microsandbox’s local full snapshots preserve disk, memory, and running processes; its cloud snapshots currently preserve disk only. [21]

Cloudflare’s SDK is open source, but its hosted compute is billed through the platform. microsandbox’s runtime is also open source and runs on your own hardware without a service subscription. [5][6][26]

common questions

does Cloudflare Sandbox use VMs?

yes. each production sandbox container runs in its own VM. [1] local development instead uses Wrangler and a Docker-compatible engine. [3]

is Cloudflare Sandbox free?

production use requires Workers Paid. Containers, Workers, and Durable Objects contribute usage charges; consult the pricing page for allowances and rates. [2][5]

is Cloudflare Sandbox open source?

the Sandbox SDK is Apache-2.0. that is distinct from the managed Containers platform it calls. microsandbox publishes the locally executable runtime as well as its SDKs. [2][6][26]

primary sources

  1. [1] Cloudflare sandbox security model · last verified 2026-09-26
  2. [2] Sandbox SDK and Workers integration · last verified 2026-09-26
  3. [3] local development with Docker and Wrangler · last verified 2026-09-26
  4. [4] directory backups and R2 restore · last verified 2026-09-26
  5. [5] Sandbox billing components · last verified 2026-09-26
  6. [6] Sandbox SDK Apache-2.0 license · last verified 2026-09-26
  7. [7] outbound traffic handlers · last verified 2026-09-26
  8. [20] microsandbox cloud availability and backend compatibility · last verified 2026-09-26
  9. [21] microsandbox disk snapshots, full checkpoints, and local branching · last verified 2026-09-26
  10. [22] microsandbox managed deployment with Jamf and Intune · last verified 2026-09-26
  11. [23] microsandbox offline provisioning of runtime dependencies and images · last verified 2026-09-26
  12. [24] microsandbox microVM isolation · last verified 2026-09-26
  13. [25] microsandbox runtime, CLI, images, and language SDKs · last verified 2026-09-26
  14. [26] microsandbox source, Apache-2.0 license, and supported host platforms · last verified 2026-09-26
  15. [27] microsandbox cloud plans and usage pricing · last verified 2026-09-26
  16. [28] microsandbox credential substitution and its limits · last verified 2026-09-26

run it locally.

put the boundary on your own machine before you choose anything else.

run it locally