Secure sandbox runtime

Run untrusted code like you own the box.

dummie boots hardware-isolated microVMs in milliseconds. Give your agents a real machine to work on — files, network, a full shell — without ever risking your own.

Start building See it in action

$ curl -fsSL dummie.sh | sh

~/dummie — sandbox

$dummie run ./agent.py --net=egress-only

$resolving image python:3.13-slim

$[OK]sandbox sbx_7f3a booted in 142ms

$mount /workspace ro=false quota=2GiB

$> executing agent.py (pid 1) in isolated vm

$> tool call: read_file("data.csv") -> 4.2KB

$[OK]run finished exit=0 wall=1.83s peak_mem=61MB

$snapshot saved snap_a19c (restore in <200ms)

142mscold boot
10k+concurrent sandboxes
<200mssnapshot restore
99.99%run isolation

// Built for agents

A production runtime for code you didn't write.

Isolation, speed, and control as primitives — not add-ons.

Hardware isolation
Every run gets its own microVM. Untrusted and AI-generated code never touches your host or its neighbors.
Sub-second boot
Cold starts under 150ms. Spin up thousands of sandboxes in parallel and tear them down just as fast.
Fork & snapshot
Freeze a running sandbox and restore it in under 200ms. Branch execution state like you branch code.
Per-run networking
Egress-only, allow-listed, or fully offline. Network policy is scoped to a single run, not the fleet.
Full filesystem
A real POSIX filesystem with quotas. Mount your workspace read-write and stream files back out.
Any runtime
Bring your own image. Python, Node, Go, or a bespoke toolchain — if it runs in a container, it runs here.

// Ship it

Your first sandbox is one command away.

Open the console

Run untrusted code like you own the box.

A production runtime for code you didn't write.

Hardware isolation

Sub-second boot

Fork & snapshot

Per-run networking

Full filesystem

Any runtime

Your first sandbox is one command away.