AI Potluck
Infrastructure / Deployment

Modal Sandboxes

Modal Labs

Closed-source serverless platform that lets you run Python and shell code (including GPU workloads) in seconds-startup containers, with a dedicated Sandbox primitive for executing untrusted agent-generated code. Picked when AI teams need GPU-capable sandboxes with Pythonic ergonomics. Raised $355M Series C in May 2026 at a $4.65B valuation; $300M annualized revenue driven largely by coding-agent demand.

Modal Sandboxes - 'secure containers for executing untrusted user or agent code' on the Modal platform; gVisor-based isolation. Open Python/JS SDK + proprietary managed cloud (pay-per-CPU-cycle, $30/mo free credits on Starter). Docs verified live June 2026.

Openness

1 high confidence
1.0
license
Proprietary
source
closed
service
proprietary Modal managed cloud (no self-host of the gVisor execution plane)
open-part
client SDK only (modal Python/JS client libraries)
pricing
pay-as-you-go usage, free starter credits

Closed managed service. The client SDK is open, but the execution substrate is a proprietary managed cloud with no self-host; an open client over a closed runtime is not open_core. Corrects a prior mis-calibration that grouped Modal with the genuinely self-hostable E2B (E2B ships self-hostable infra; Modal does not).

Adoption

3 low confidence
3.0

No disclosed Modal Sandboxes user/usage count on primary pages; Modal is a well-known managed AI-compute platform with broad developer use and a documented free tier. Placed at 3 on reported multi-customer traction, not a measured usage_volume figure (kept conservative absent a hard number).

Capability

4 medium confidence
4.0

Strong, purpose-built agent sandbox: gVisor isolation + arbitrary images + high concurrency. Sits just below the Firecracker-microVM frontier (Lambda/Vercel) on isolation strength; scored 4, level with the Ray/Ollama capability anchors. Independent ComputeSDK TTI benchmarks measure ~470ms median cold-start (13th of 19 sandbox providers), consistent with the fast-container-stack claim.

Unchanged since 2026-07-30 (last edited, not re-checked)