AI Potluck
Infrastructure / Deployment

Northflank Sandboxes

Northflank

Runs untrusted and AI-generated code in microVM-backed sandboxes isolated with Kata Containers and gVisor, booting in under a second with no forced session time limit. Sandboxes sit inside Northflank's wider runtime platform alongside services, jobs, databases and GPU workloads, and can run on Northflank's cloud or inside a customer VPC. Northflank Ltd operates it as a commercial managed service.

Scored on the Sandboxes product rather than the Northflank platform as a whole; the adoption figures the vendor publishes are platform-level. Verified 2026-08-13 via northflank.com and the Northflank Sandboxes product page.

Openness

1 high confidence
1.0
license
Proprietary
service
proprietary(Northflank managed SaaS)
source
closed
isolation
microVM

Proprietary managed deployment/sandbox platform; no open source runtime published. Sandboxes run on Northflank Cloud or inside a customer VPC with no source release and no self-hostable runtime, and the microVM layer is built on third-party projects (Kata Containers, gVisor) rather than anything Northflank publishes.

  • https://northflank.com/ recorded 2026-08-13

    Northflank Sandboxes = secure microVM sandbox for untrusted/code-gen execution; proprietary commercial SaaS

  • https://northflank.com/product/sandboxes recorded 2026-08-13

    Sandboxes run on Northflank infrastructure or inside a customer VPC; Kata Containers and gVisor named as the isolation layer; no self-hostable runtime or source offered

Adoption

3 medium confidence
3.0

Northflank publishes platform-wide figures: 2,000+ start-ups and enterprises, 100k+ developers in production, 130B+ requests, millions of containers and 330+ availability zones. These are platform-level rather than Sandboxes-specific, and the Sandboxes product is newer, so this sits at 3 on the developer and organization base; the Sandboxes feature alone is likely lower. The one Sandboxes-specific claim is on the product page - millions of microVMs run monthly since 2021 - and it is still a vendor claim with no countable artifact behind it, so no reach figure is recorded.

  • https://northflank.com/ recorded 2026-08-13

    2,000+ start-ups and enterprises, 100k+ developers in production, 130B+ requests, millions of containers, 330+ availability zones (platform-level)

  • https://northflank.com/product/sandboxes recorded 2026-08-13

    Sandboxes-specific claim of millions of microVMs run monthly since 2021; SOC 2 Type 2 and HIPAA badges; no per-customer or per-session usage figure

Capability

4 medium confidence
4.0

Strong: microVM isolation, ~200ms cold-start, broad runtime support, multi-cloud scale, and explicit support for untrusted code-gen at scale. The Sandboxes product page names Kata Containers and gVisor, boots a microVM in under a second, imposes no forced session time limit, and offers deployment inside a customer VPC. Just below frontier on proven sandbox-specific scale against the dedicated leaders; isolation and latency are top-tier, and independent ComputeSDK TTI benchmarks confirm the latency, measuring a 0.25s median cold-start and 3rd place by composite of 24 sandbox providers.

  • https://northflank.com/ recorded 2026-08-13

    microVM 200ms isolation, untrusted code at scale, millions of containers, 330+ AZs

  • https://northflank.com/product/sandboxes recorded 2026-08-13

    Kata Containers and gVisor isolation, microVM boot in under a second, no forced session time limits, bring-your-own-cloud VPC deployment

  • https://www.computesdk.com/benchmarks/sandboxes/ recorded 2026-08-13

    ComputeSDK TTI leaderboard (independent, 2026-08-07 run, 24 providers): Northflank median time-to-interactive 0.25s, P95 0.29s, P99 0.30s, 100% success; 3rd by composite score

Verified 2026-08-13