microsandbox
local + cloud
cloudflare sandboxes
Workers-integrated sandboxes
runtime ownership
apache 2.0 runtime and SDKs [26]
Apache-2.0 Sandbox SDK; production execution on Cloudflare Containers [2][6]
production isolation
microVM per sandbox [24]
separate VM per sandbox container [1]
local execution
macOS · Linux · Windows [26]
Wrangler and a Docker-compatible engine [3]
integration
rust · typescript · python · go · ruby · CLI [25][26]
TypeScript SDK integrated with Workers and Durable Objects [2]
saved state
local snapshots save disk state, or disk, memory, and running processes with --full. cloud currently supports disk snapshots from stopped persistent sandboxes and disk restore. [21]
directory backups in R2; separate bucket mounts for persistent data [4]
employee devices
Jamf or Intune-managed settings; local administrators can replace the policy or runtime [22]
production application deployed to Cloudflare [2]
credentials
placeholder in the guest; host-side substitution for allowed destinations in supported requests. an allowed endpoint can still expose the real secret. [28]
Worker outbound handlers can inject credentials outside the sandbox [1][7]
pricing
free local runtime · cloud free tier and paid plans [27]
Workers Paid plan; Containers, Workers, and Durable Objects usage charges [2][5]