back to microsandbox

compare

microsandbox vs docker sandboxes

reviewed

microsandbox gives you an open-source runtime you can embed, run without an account, and checkpoint locally. Docker Sandboxes is proprietary, with a private Docker daemon and ready-made coding-agent integrations. [2][4][21][26]

both isolate each sandbox in a microVM. the difference is how much of the runtime you own and how your application controls it. microsandbox exposes local execution through five language SDKs; Docker centers its local workflow on the sbx CLI and daemon. [2][4][25]

Docker’s local Sandboxes are free, including commercial use. cloud compute and organization governance are separate paid offerings. it also now offers an experimental cloud API and TypeScript SDK. [1][3]

microsandbox
local + cloud
docker sandboxes
local and cloud coding-agent sandboxes
runtime license
apache 2.0 runtime and SDKs [26]
proprietary Docker Sandboxes distribution [4]
local price and account
free to run on your hardware · no account required [23][26]
free for commercial use; Docker sign-in required [1][5]
local host platforms
macOS · Linux · Windows [26]
macOS on Apple Silicon · Windows 11 x64 · supported Linux hosts [6]
local integration
rust · typescript · python · go · ruby · CLI [25][26]
sbx CLI, sandbox daemon, coding-agent integrations [2][4]
Docker inside the sandbox
runs OCI images; no Docker daemon bundled [25]
private Docker daemon included [2]
snapshots
local snapshots save disk state, or disk, memory, and running processes with --full. cloud currently supports disk snapshots from stopped persistent sandboxes and disk restore. [21]
local filesystem templates; memory capture is a cloud-only option [7]
cloud
local runtime · microsandbox cloud (private beta, access by request) [20]
paid cloud compute; experimental REST API and TypeScript SDK [1][3]
device policy
Jamf or Intune-managed settings; local administrators can replace the policy or runtime [22]
paid organization governance for local sandboxes [1]
credentials
placeholder in the guest; host-side substitution for allowed destinations in supported requests. an allowed endpoint can still expose the real secret. [28]
host proxy injects secrets for configured destinations [8]
pick microsandbox

choose microsandbox when

  • you need an Apache-2.0 runtime you can inspect, modify, and embed. [26]
  • agents must run locally without a vendor account, including offline deployments. [23]
  • you need local memory checkpoints and branches of a running workload. [21]
pick docker sandboxes

choose docker sandboxes when

  • your agent needs a private Docker daemon and packaged agent integrations. [2]
  • you want Docker’s paid local governance and cloud service. [1][3]

01

free to use is different from open source

Docker Engine, Docker Desktop, and Docker Sandboxes have different terms. Sandboxes’ free local tier does not make its runtime open source. microsandbox’s Apache-2.0 runtime is free to use commercially; hosted compute has separate pricing. [1][4][26][27]

02

local checkpoints and cloud snapshots

microsandbox can save a running local sandbox’s disk and memory, then restore independent children. a running source resumes after capture. Docker’s template CLI documents memory capture for cloud only; its experimental cloud SDK also supports snapshot and restore. [7][9][21]

microsandbox cloud currently restores disk snapshots from stopped persistent sandboxes. full memory checkpoints remain local. neither product makes every local capability available in its cloud backend. [10][20][21]

common questions

is Docker Sandboxes paid?

local Sandboxes are free, including commercial work. cloud compute uses a pay-as-you-go subscription, and organization governance is paid separately. a Docker account is required. [1][5]

is Docker Sandboxes open source?

its distribution repository labels the product proprietary. microsandbox’s runtime and SDKs use Apache-2.0. [4][26]

does microsandbox support windows?

yes. the local runtime supports Windows, alongside macOS on Apple Silicon and Linux with KVM. Windows is no longer labeled preview. guests run Linux. [26]

primary sources

  1. [1] Docker Sandboxes availability and pricing model · last verified 2026-09-26
  2. [2] local architecture and private Docker daemon · last verified 2026-09-26
  3. [3] experimental cloud API and SDK · last verified 2026-09-26
  4. [4] Docker Sandboxes distribution and proprietary license · last verified 2026-09-26
  5. [5] free commercial use and account requirements · last verified 2026-09-26
  6. [6] supported local hosts · last verified 2026-09-26
  7. [7] template capture modes and cloud-only memory capture · last verified 2026-09-26
  8. [8] credential proxy · last verified 2026-09-26
  9. [9] cloud snapshots and forks · last verified 2026-09-26
  10. [10] local and cloud feature differences · last verified 2026-09-26
  11. [20] microsandbox cloud availability and backend compatibility · last verified 2026-09-26
  12. [21] microsandbox disk snapshots, full checkpoints, and local branching · last verified 2026-09-26
  13. [22] microsandbox managed deployment with Jamf and Intune · last verified 2026-09-26
  14. [23] microsandbox offline provisioning of runtime dependencies and images · last verified 2026-09-26
  15. [25] microsandbox runtime, CLI, images, and language SDKs · last verified 2026-09-26
  16. [26] microsandbox source, Apache-2.0 license, and supported host platforms · last verified 2026-09-26
  17. [27] microsandbox cloud plans and usage pricing · last verified 2026-09-26
  18. [28] microsandbox credential substitution and its limits · last verified 2026-09-26

run it locally.

put the boundary on your own machine before you choose anything else.

run it locally