Sandboxes for AI agents

A secure computer for every AI agent.

Run model-written code in isolated sandboxes that start in well under a second, can’t reach your cloud metadata or your other tenants, and never hold a long-lived credential. Try it on our cloud, or run it inside your own.

Start a free trial Read the API

126 mswarm sandbox handoff, measured on our cluster

5 / 5isolation probes blocked from inside a sandbox

2runtimes: gVisor or microVM, per template

0cloud keys inside a sandbox, ever

How it works

1 · Create

One API call claims a pre-warmed sandbox. Every sandbox has a time-to-live and an idle timeout.

2 · Exec & files

Run commands, stream output back, move files in and out of /work. Every command lands in your audit log.

3 · Isolated by default

gVisor or Kata microVM, non-root, no capabilities, deny-all network. Egress only to what you allow.

4 · Destroyed

Delete it, or let the reaper do it at TTL. Nothing persists, nothing leaks into the next one.

curl -X POST https://caisson.rajendrag.com/v1/sandboxes \
  -H "Authorization: Bearer $CAISSON_API_KEY" -H "Content-Type: application/json" \
  -d '{"template":"python-datasci","ttlSeconds":900}'

curl -X POST https://caisson.rajendrag.com/v1/sandboxes/$ID/exec \
  -H "Authorization: Bearer $CAISSON_API_KEY" -H "Content-Type: application/json" \
  -d '{"cmd":"python3","args":["-c","print(sum(range(10)))"]}'

Two ways to run Caisson

Same API, same SDK, same isolation. The difference is whose cloud account it runs in.

Start here

Hosted trial

Runs on Caisson’s cloud. Get a key, start calling the API in minutes.

3 concurrent sandboxes
10 sandbox-hours a month
Sandboxes live up to 1 hour
Python data-science template
Free during early access

For production & regulated data

Bring your own cloud

The whole platform deploys into your cloud account with Terraform. Your data and your compute never leave it.

Your region, your residency rules
Pay your cloud provider for compute; a platform fee to us
Credential injection for your data services
GCP today; AWS, Azure and OCI next

How access works

1 · Sign up

Create an account with your email.

2 · Request access

Choose the hosted trial or bring your own cloud, and tell us what your agents will run.

3 · Get your key

Once approved, create and revoke API keys yourself in the dashboard.

Create an account