Vercel Sandbox
A disposable isolated compute environment provided by Vercel, implemented on microVMs and used to run untrusted or short-lived code safely. It is designed to be temporary and does not retain runtime state.
Core Facts
Timeline (last 90 days)
Previously, the typical pain point of Vercel Sandbox was that internal files disappeared once the sandbox stopped, and every run required preparing dependencies, datasets, or intermediate artifacts from scratch.
Vercel Drives is now generally available for Vercel Sandbox, covering all three tiers: Hobby, Pro, and Enterprise.
Vercel provides a Python SDK that can call Vercel products such as Vercel Blob, Queues, Workflows, Sandbox, and the AI SDK for Python.
Vercel Drives is a persistent storage solution provided by Vercel that makes Agent files independent of the execution environment, and is currently generally available (GA) on Vercel Sandbox.
Vercel Sandbox is a one-off isolated compute environment; each creation allocates a new clean microVM instance, which is destroyed after the run ends, saving no runtime state.
A Drive in Vercel Drives is a persistent volume independent of the Sandbox; the Sandbox associates it with a file system path via mounting, with reads and writes below the mount point landing on the Drive and those outside being temporary storage.
Multiple Sandboxes can mount the same Drive simultaneously, and switching at runtime requires no additional data migration.
Vercel Drives is open to all plans of Vercel Sandbox.
Vercel launched a million-dollar-level sandbox escape challenge, inviting security researchers worldwide to try to break through the isolation boundary of Vercel Sandbox.
Vercel Sandbox is suitable for scenarios such as code execution, CI tasks, or AI Agent tool calls
10 more timeline events
All Facts (20)
Vercel provides a Python SDK that can call Vercel products such as Vercel Blob, Queues, Workflows, Sandbox, and the AI SDK for Python.
65%UnverifiedA Drive in Vercel Drives is a persistent volume independent of the Sandbox; the Sandbox associates it with a file system path via mounting, with reads and writes below the mount point landing on the Drive and those outside being temporary storage.
60%UnverifiedPreviously, the typical pain point of Vercel Sandbox was that internal files disappeared once the sandbox stopped, and every run required preparing dependencies, datasets, or intermediate artifacts from scratch.
50%UnverifiedMultiple Sandboxes can mount the same Drive simultaneously, and switching at runtime requires no additional data migration.
50%UnverifiedVercel Drives is open to all plans of Vercel Sandbox.
50%UnverifiedVercel Sandbox is a one-off isolated compute environment; each creation allocates a new clean microVM instance, which is destroyed after the run ends, saving no runtime state.
50%UnverifiedVercel Sandbox is suitable for scenarios such as code execution, CI tasks, or AI Agent tool calls
50%UnverifiedPreviously, the timing of Sandbox.create() resolving and the timing of the sandbox actually becoming usable were misaligned, and the wait for snapshot restoration was implicitly shifted onto the first operation
50%UnverifiedSnapshot restoration is the key mechanism by which a sandbox establishes its execution environment, and a snapshot contains images of the file system, installed dependencies, and process memory
50%UnverifiedSnapshot restoration time is now counted in the creation phase, and creation time has increased by about 50 milliseconds at p50; for uncached snapshots, the increase may be larger
50%UnverifiedThe total time through the first operation remains unchanged, and end-to-end latency has not changed; what has changed is which stage the latency appears in
50%UnverifiedFor projects already using Vercel Sandbox, existing code will not error out because of this change
50%UnverifiedVercel Sandbox is based on lightweight isolation technology similar to Firecracker/gVisor, creating an independent isolated environment for each code execution.
50%UnverifiedVercel Drives is now generally available for Vercel Sandbox, covering all three tiers: Hobby, Pro, and Enterprise.
50%UnverifiedVercel Drives is a persistent storage solution provided by Vercel that makes Agent files independent of the execution environment, and is currently generally available (GA) on Vercel Sandbox.
50%UnverifiedVercel launched a million-dollar-level sandbox escape challenge, inviting security researchers worldwide to try to break through the isolation boundary of Vercel Sandbox.
50%UnverifiedThis change to Vercel Sandbox requires no SDK upgrade and no configuration changes to take effect
50%UnverifiedErrors during the startup phase now directly reject Sandbox.create(), rather than only being exposed at the time of the first operation
50%UnverifiedVercel Sandbox's Sandbox.create() now only resolves after snapshot restoration is complete, and the returned object is a ready instance that can immediately execute commands and read and write files
50%UnverifiedVercel announced that it is making the Sandbox Egress Firewall feature available for free to users on all subscription plans.
50%