gVisor

Linux · Self-hosted

Visit site Alternatives

Freedom report

Two barsScore 6.4

Free tierA free tier is on its own pricing page
Open codeNo open-source code on record
Runs widely1 of 6 device platforms
DocumentedPlans, terms and facts published

gVisor is ranked #10 of 31 in container engines on Freedom251. It runs on Linux, Self-hosted. There is a free plan.

gVisor plans and pricing

All plans

gVisor Free Open-source Linux-compatible sandbox; requires Linux 5.6+ and x86_64 or ARM64 gvisor.dev · 4 Oct 2026

Compared on container engines

Free plan: Yes
Rootless mode: Yes
Image building: Yes
Kubernetes CRI: Yes
Windows containers: No
Image format: both
Runtime interface: other
Supported host OS: Linux

Best gVisor alternatives

See all 12

Two bars Apptainer Free tier No. 1Free6.6 Two bars BuildKit Free tier No. 2Free6.6 Two bars Docker Desktop Free tier No. 3$9/mo6.6 Two bars Incus Free tier No. 4Free6.6 One bar containerd Free tier No. 5Free6.5 One bar LXD Free tier No. 6$2.08/mo6.5

The record

Product: gVisor is an open-source Linux-compatible sandbox for running containers.
Use case: It is designed to isolate hosts from untrusted code, including user-uploaded, LLM-generated, and third-party code.
System call isolation: gVisor intercepts sandboxed applications’ system calls and implements them in its Sentry instead of passing them directly to the host.
Defense in depth: The Sentry’s access to host system calls is minimized, and the site says gVisor runs with least privileges and a strict system call filter.
Container integrations: The project documents use with Docker, Kubernetes, containerd, and OCI runtimes.
Runtime monitoring: gVisor can stream application trace points to an external threat detection engine such as Falco to generate alerts.
GPU support: gVisor supports most CUDA applications on selected NVIDIA driver versions, and the GPU application can run unmodified inside the sandbox.
GPU limits: GPU support is limited to selected models, driver versions, capabilities, device files, ioctl calls, and platforms.
Supported host: Installation requires Linux 5.6 or later and supports x86_64 and ARM64.
Compatibility caveat: The application compatibility list is best-effort and does not guarantee that applications marked compatible are fully functional.
Hardware security limit: gVisor generally does not protect against hardware side channels and relies on the host operating system and platform for those defenses.
Support: The project directs users to GitHub issues, documentation, and mailing lists for support and community discussion.
License and availability: gVisor is described on its official site as open-source software.
Purpose: gVisor is an open-source Linux-compatible sandbox and application kernel that isolates containers from the host operating system.
Price from: Free

Where it ranks on Freedom251

Best Container Engines in 2026#10 of 31
Best Container Runtime Software in 2026#12 of 27

Is gVisor yours?

Claim it for free: prove the domain, then correct facts, plans and screenshots. An editor reviews every change.

Claim it free Promote gVisor

Sources

gvisor.dev· checked 4 Oct 2026
gvisor.dev/docs/architecture_guide/security/· checked 4 Oct 2026
gvisor.dev/docs/user_guide/gpu/· checked 4 Oct 2026
gvisor.dev/docs/user_guide/install/· checked 4 Oct 2026
gvisor.dev/application-compatibility/· checked 4 Oct 2026
gvisor.dev/docs/· checked 4 Oct 2026
gvisor.dev/docs/user_guide/quick_start/kubernetes/· checked 4 Oct 2026
gvisor.dev/security/· checked 4 Oct 2026