microsandbox vs nono
microsandbox
microsandbox.dev
nono
nono.shSide by side
| Figure | microsandbox | nono |
|---|---|---|
| Price from | $49/mo | — |
| Free plan | Yes | — |
| Free trial | — | — |
| Open source | — | — |
| Windows | Yes | Yes |
| macOS | Yes | Yes |
| Linux | Yes | Yes |
| API | Yes | Yes |
| Self-hosted | Yes | — |
| Plans published | 4 | 0 |
| Spec score · Sandbox Software | 8.2 (#8) | 7.5 (#15) |
| Credential handling | Bound secrets are represented by placeholders inside the sandbox and substituted host-side for supported intercepted requests to approved destinations. | The site says credentials are injected at the boundary and never exposed to the agent. |
| Isolation | Each sandbox is a microVM with its own Linux kernel, filesystem, and network boundary, rather than a container sharing the host kernel. | It uses Landlock on Linux and WSL2 and Seatbelt on macOS to enforce filesystem allow-lists that cannot be loosened after application. |
| Network controls | By default, sandboxes can reach the public internet while private, host-local, link-local, and metadata destinations are blocked; egress can be allowlisted or disabled. | It can block network access, allow specific domains, filter API endpoints, and route filtered traffic through an upstream proxy. |
| Support | The product FAQ directs users with questions to its Discord community. | The documentation links to GitHub for source code and issues and Discord for community support. |
Plans
microsandbox
- FreeFree
- Builder$49 a month
- Teams$299 a month
- EnterprisePriced on request
In their own words
microsandbox
Microsandbox runs untrusted workloads inside microVMs, each with its own Linux kernel, filesystem, and network boundary rather than sharing the host kernel. It can run AI agents, user code, plugins, CI jobs, scrapers, and automation. The local runtime starts on a user's machine without a daemon, root service, or account; it can also run on personal servers or clusters, and its cloud platform can be deployed in the user's infrastructure. Microsandbox offers SDKs for TypeScript, Rust, Python, Go, and Ruby, plus a CLI and MCP workflows, and accepts OCI images from container registries. By default, sandboxes can reach the public internet, while private, host-local, link-local, and metadata destinations are blocked; egress can be allowlisted or disabled. The runtime is open source under Apache 2.0. The Free plan is $0 per month, while paid plans start at $49 per month. Microsandbox Cloud is in private beta and requires an access request.