OpenSandbox and sandboxed.sh
These are complementary tools at different abstraction levels: OpenSandbox provides a managed multi-language sandbox platform with SDKs and orchestration, while sandboxed.sh is a self-hosted agent orchestrator that could use sandboxing backends to isolate Claude/Open Code execution in Linux workspaces.
About OpenSandbox
alibaba/OpenSandbox
OpenSandbox is a general-purpose sandbox platform for AI applications, offering multi-language SDKs, unified sandbox APIs, and Docker/Kubernetes runtimes for scenarios like Coding Agents, GUI Agents, Agent Evaluation, AI Code Execution, and RL Training.
Supports strong workload isolation through secure container runtimes (gVisor, Kata Containers, Firecracker) and implements unified network policies with ingress gateway routing plus per-sandbox egress controls. The platform provides built-in Command, Filesystem, and Code Interpreter implementations with lifecycle management across Docker and high-performance Kubernetes runtimes, enabling seamless scaling from local development to distributed scheduling.
About sandboxed.sh
Th0rgal/sandboxed.sh
Self-hosted orchestrator for AI autonomous agents. Run Claude Code & Open Code in isolated linux workspaces. Manage your skills, configs and encrypted secrets with a git repo.
Orchestrates multiple AI coding agent runtimes (Claude Code, OpenCode, Amp) with native systemd-nspawn container isolation for workspace security and file scoping. Features a Git-backed library for versioning skills, tools, rules, and MCP servers alongside an optional OpenAI-compatible proxy queue mode for rate-limit handling, with real-time monitoring dashboards and iOS app support via Next.js and SwiftUI frontends.
Related comparisons
Scores updated daily from GitHub, PyPI, and npm data. How scores work