Deno Sandbox
What Deno Sandbox is
Deno Sandbox is an SDK for creating isolated Linux microVMs in the cloud on Deno Deploy. It is intended for workloads including AI agents, copilots, plugin systems, collaborative IDEs, ephemeral CI runners, smoke tests, user-supplied code, and preview environments. Each sandbox has its own filesystem, network stack, and process tree, isolated at the hypervisor level. Outbound networking is unrestricted by default, with an allowlist available to restrict connections; secrets remain placeholders and are substituted only for outbound requests to approved hosts. Files are temporary unless a volume is mounted, and the VM and disk are destroyed when it is killed or its last reference is dropped. A sandbox supports 2 vCPU, 10 GB of ephemeral disk, configurable memory from 768 MB to 4096 MB, and a maximum 30-minute lifetime. The SDK is supported on Deno latest stable, Node.js 24+, and Python 3.10 or later; packages and REST API access are available. Listed regions are Amsterdam and Chicago. The Free plan does not include Sandbox; Pro costs $20 /month and includes it.
Who it suits
Deno Sandbox suits developers building workloads that need isolated cloud environments, such as AI agents, user-supplied code runners, or preview environments. It may also fit teams needing sandbox access through SDKs or a REST API.
What it does well
- MicroVMs have separate filesystems and network stacks
- Outbound hosts can be restricted with an allowlist
- Can expose HTTP dev servers, SSH, and VS Code
- Commands, HTTP requests, and SSH sessions can be traced
- Pro includes Sandbox at $20 /month
What to know first
- Free plan does not include Sandbox
- Sandbox lifetime is capped at 30 minutes
- Default prerelease limit is 5 concurrent sandboxes per organization
- Only Amsterdam and Chicago are listed as regions
Limits
The Free plan has no Sandbox and includes 1M requests/month and 10 hr active CPU. The Pro plan costs $20 /month and includes 3 concurrent sandboxes per region and 5 GiB volume storage; Builder costs $200 /month and includes 20 per region and 50 GiB. Sandboxes have a maximum 30-minute lifetime, and the documented default prerelease concurrency limit is 5 per organization.
Plans
| Plan | Billed and limits | Price |
|---|---|---|
| Free | $0 /month · Sandbox not included · 1M requests/month · 10 hr active CPU | Free |
| Deno Sandbox usage | Volume usage: $0.20/GiB-month · CPU time · memory · persistent volume usage | $0.20 a month |
| Pro | $20 /month · Sandbox included · 3 concurrent sandboxes per region · 5 GiB volume storage | $20 a month |
| Builder | $200 /month · Sandbox included · 20 concurrent sandboxes per region · 50 GiB volume storage | $200 a month |
| Enterprise | Custom · Custom sandbox concurrency and volume storage · contact sales | On request |
As deno.com lists them, read 30 Sept 2026. The maker's own page has the final word.
Getting started
- Open the Deno Sandbox website.
- Choose an access route: JavaScript SDK from npm or JSR, Python SDK from PyPI, or the REST API.
- Use Deno latest stable, Node.js 24 or later, or Python 3.10 or later.
- Select a plan with Sandbox included, such as Pro or Builder.
- Create a sandbox in Amsterdam or Chicago and configure its outbound host allowlist if needed.
Verdict
Deno Sandbox provides isolated cloud microVMs with controls for outbound access and ephemeral storage. The Free plan excludes Sandbox, so teams needing it should account for the $20 /month Pro plan and the documented concurrency and lifetime limits.
Questions
Is Deno Sandbox free?
Deno Deploy has a Free plan at no cost, but Sandbox is not included. Sandbox usage is billed at $0.20/GiB-month for CPU time, memory, and persistent volume usage.
How much does a plan with Sandbox cost?
Pro costs $20 /month and includes Sandbox, 3 concurrent sandboxes per region, and 5 GiB volume storage. Builder costs $200 /month and includes Sandbox, 20 concurrent sandboxes per region, and 50 GiB volume storage.
Which platforms and runtimes does it support?
The platforms are API and web. The SDK is supported on Deno latest stable, Node.js 24 or later, and Python 3.10 or later.
How can I access the SDK or API?
The JavaScript SDK is available on npm and JSR, the Python SDK on PyPI, and direct access through a REST API.
Where can sandboxes run?
The listed sandbox regions are Amsterdam and Chicago.
What support and compliance are included?
Community support is included on every listed plan. Email support is available on Pro, Builder, and Enterprise, with an email support SLA on Enterprise. Deno Deploy is described as SOC2 and ISO27001 certified; HIPAA BAAs are available for enterprise contracts.
Facts from Deno Sandbox's own pages
- Compliance
- The Sandbox FAQ says Deno Deploy is SOC2 and ISO27001 certified and says HIPAA BAAs are available for enterprise contracts. · deno.com, 30 Sept 2026
- Concurrency limit
- The docs state a default prerelease limit of 5 concurrent sandboxes per organization and invite users to contact Deno for a higher limit. · docs.deno.com, 30 Sept 2026
- Connectivity and development
- Sandboxes can expose a dev server over HTTP, provide SSH access, and expose an on-demand VS Code editor. · deno.com, 30 Sept 2026
- Headquarters
- San Diego, California, USA · deno.com, 28 Sept 2026
- Isolation
- Each sandbox is a Linux microVM isolated at the hypervisor level with its own filesystem, network stack, and process tree. · deno.com, 30 Sept 2026
- Observability
- Commands, HTTP requests, and SSH sessions can be traced in the Deno Deploy dashboard. · docs.deno.com, 30 Sept 2026
- Outbound access
- Outbound networking is unrestricted by default, and an allowlist can restrict connections to specified hosts. · docs.deno.com, 30 Sept 2026
- Packages and API
- The JavaScript SDK is available on npm and JSR, the Python SDK is on PyPI, and direct API access is available through a REST API. · docs.deno.com, 30 Sept 2026
- Regions
- The docs list Amsterdam and Chicago as supported sandbox regions. · docs.deno.com, 30 Sept 2026
- Resource limits
- The documented limits include 2 vCPU, 10 GB ephemeral disk, configurable 768 MB to 4096 MB memory, and a maximum 30-minute lifetime per sandbox. · docs.deno.com, 30 Sept 2026
- Runtime support
- The SDK is tested and supported on Deno latest stable, Node.js 24+, and Python 3.10 or later. · docs.deno.com, 30 Sept 2026
- Secret handling
- Secrets remain placeholders inside the sandbox and are substituted only for outbound requests to approved hosts. · docs.deno.com, 30 Sept 2026
- Storage cleanup
- Sandbox files are ephemeral unless a volume is mounted, and the VM is destroyed and its disk wiped when its last reference is dropped or it is killed. · docs.deno.com, 30 Sept 2026
- Support
- The pricing page includes community support on every listed plan, email support on Pro, Builder, and Enterprise, and an email support SLA on Enterprise. · deno.com, 30 Sept 2026
- Target workloads
- Deno identifies AI agents, copilots, plugin systems, collaborative IDEs, ephemeral CI runners, smoke tests, user supplied code, and preview environments as use cases. · docs.deno.com, 30 Sept 2026
- What it is
- Deno Sandbox is an SDK for creating and managing secure, isolated Linux microVMs in the cloud on Deno Deploy. · deno.com, 30 Sept 2026