MicroVM isolation
Per-agent, per-run virtual machines — not shared containers. Spawns in ~120ms, destroyed on exit.
Sandbox · Agent Runtime
A secure runtime where agents can actually do things.
Isolated microVMs, controlled tools and replayable traces — give agents code, browser and shell access without giving up control.
Runtime
Agent sandbox
TaskAnalyze & edit report
IsolationDedicated microVM
ToolsAllowlisted only
CheckpointBefore write-back
AuditReplayable trace
> sandbox.spawn(image="agent-base:2.4", cpu=2, mem=4G)
> tools.allow = [python, browser, fs:/workspace]
> network.egress = allowlist(zirax.ai, pypi.org)
> checkpoint.before("write_back") = armed
# trace sbx-88214 · every syscall recorded · retained 90d
Runtime boundary
Agents act inside a signed boundary — not a free-running script.
Every ZIRAX sandbox is a disposable microVM: isolated from your network, limited to allowlisted tools, and destroyed the moment the run ends.
MicroVM isolationTool allowlistEgress controlImmutable trace
Workflow
From task to auditable outcome
01
Define environment
Pick an image, resources and lifetime for the run.
02
Grant tools
Allow only the APIs, files, packages and domains the task needs.
03
Execute isolated
Agent runs with ephemeral storage and snapshot checkpoints.
04
Review & replay
Approve sensitive actions; replay the full trace at any time.
Capabilities
Built for agents that take action
Code & browser tools
Python, shell, headless browser and file tools pre-installed, versioned and patched by ZIRAX.
Tool & network allowlists
Grant exactly the tools, paths, packages and egress domains a task requires — nothing else.
Checkpoints & approvals
Pause before irreversible actions. Human or rule-based sign-off resumes the run.
Replayable audit traces
Every command, tool call and state change is recorded and replayable for review or compliance.
Elastic scale
Thousands of concurrent sandboxes with per-team quotas, budgets and automatic cleanup.
Specs
Runtime, by the numbers
~120ms
Cold sandbox spawn, ready for tool calls.
10k+
Concurrent sandboxes per region, elastic.
90 days
Default trace retention; configurable for audit regimes.
Let your agents act — safely
Talk to us about sandbox pilots, on-prem images and approval workflows for your team.
Request access