{
 "features_resolved": {
  "snapshot_any": true,
  "snapshot_mem": false,
  "fork": false,
  "pause_resume": false,
  "persistent_disk": true,
  "whole_disk": null,
  "persist_scope": null,
  "volumes": true,
  "auto_stop_idle": false,
  "long_sessions": false,
  "custom_image": true,
  "image_snapshot": true,
  "image_oci": false,
  "vm_isolation": true,
  "docker_inside": null,
  "nested_virt": false,
  "root": true,
  "systemd": null,
  "browser": false,
  "desktop": false,
  "computer_use": false,
  "code_interpreter": false,
  "browser_control": null,
  "desktop_control": null,
  "browser_and_desktop": false,
  "anti_bot": false,
  "captcha_solving": false,
  "residential_ip": false,
  "agent_harnesses": true,
  "ssh": true,
  "public_ipv4": false,
  "inbound_https": true,
  "custom_domain": false,
  "raw_tcp_inbound": false,
  "egress_allowlist": true,
  "open_internet": true,
  "static_egress_ip": false,
  "private_network": null,
  "self_host": false,
  "byoc": false,
  "open_source": false,
  "soc2": true,
  "hipaa": true,
  "sso": false,
  "gpu": false,
  "arm64": false,
  "windows": false,
  "macos": false,
  "lang_python": false,
  "lang_node": false,
  "lang_go": null,
  "lang_rust": null,
  "lang_java": null,
  "gpu_desktop": false,
  "credential_injection": true,
  "egress_http_rules": false,
  "wake_on_request": false,
  "live_resize": false,
  "fork_running": false,
  "memory_snapshot_fork": false,
  "webhooks": null,
  "scheduled_wakeups": null,
  "audit_logs": null,
  "eu_data_residency": true,
  "zero_data_retention": null,
  "scoped_api_keys": null,
  "spend_limits": true,
  "mcp_server": false,
  "usage_api": false,
  "snapshot_auto": false,
  "snapshot_on_demand": true,
  "harness_api": false,
  "own_agent_api": false,
  "fast_boot": null,
  "strong_isolation": true,
  "ingress_rules": true,
  "guest_firewall": true,
  "secret_proxy": true,
  "secret_proxy_any": true,
  "volume_attach": true,
  "volume_shared": false,
  "sidecar": null,
  "fuse": true,
  "kernel_features": true,
  "burst": null
 },
 "company": {
  "id": "deno-sandbox",
  "checked": "2026-09-30",
  "company": "Deno Land Inc. (The Deno Company)",
  "ownership": {
   "value": "independent",
   "parent": null,
   "source": "https://deno.com/blog/the-deno-company",
   "quote": "In order to vigorously pursue these ideas, we have raised 4.9 million dollars of seed capital. Our investors are Dan Scholnick from Four Rivers Ventures, Guillermo from Rauch Capital, Lee Jacobs from Long Journey Ventures, the Mozilla Corporation, Shasta Ventures, and our long-time collaborator Ben Noordhuis."
  },
  "stage": {
   "value": "series-a",
   "source": "https://deno.com/blog/series-a",
   "quote": "The Deno company has raised $21M in an investment round led by Sequoia Capital with participation from Nat Friedman, Four Rivers Ventures, Insight Partners, Long Journey Ventures, Dylan Field, Automattic, Netlify, and Shasta Ventures.",
   "confidence": "high",
   "note": "Deno Land Inc (the commercial entity behind Deno Deploy / Deno Sandbox) raised a $4.9M seed round (announced March 29, 2021) and a $21M Series A (announced June 21, 2022, led by Sequoia Capital). No later priced round found as of 2026-09-30; last round is Series A."
  },
  "accelerators": [],
  "total_funding_usd": {
   "value": 25900000,
   "status": "confirmed",
   "basis": "Sum of confirmed rounds per Deno's own blog posts: $4.9M seed (the-deno-company, 2021-03-29) + $21M Series A (series-a, 2022-06-21) = $25.9M.",
   "source": "https://deno.com/blog/the-deno-company",
   "quote": "we have raised 4.9 million dollars of seed capital"
  },
  "last_round": {
   "type": "series-a",
   "amount_usd": 21000000,
   "date": "2022-06",
   "leads": [
    "Sequoia Capital"
   ],
   "status": "confirmed",
   "source": "https://deno.com/blog/series-a",
   "quote": "Deno raises $21M ... The Deno company has raised $21M in an investment round led by Sequoia Capital with participation from Nat Friedman, Four Rivers Ventures, Insight Partners, Long Journey Ventures, Dylan Field, Automattic, Netlify, and Shasta Ventures."
  },
  "investors": [
   "Sequoia Capital",
   "Insight Partners",
   "Four Rivers Ventures",
   "Long Journey Ventures",
   "Shasta Ventures",
   "Automattic",
   "Netlify",
   "Mozilla Corporation",
   "Nat Friedman",
   "Dylan Field",
   "Ben Noordhuis"
  ],
  "portfolio_listings": [],
  "revenue": {
   "value": null,
   "status": "unknown"
  },
  "employees": {
   "value": null,
   "source": ""
  },
  "note": "Deno Sandbox is a commercial product of Deno Land Inc (also branded 'The Deno Company'), the for-profit entity founded by Ryan Dahl (Node.js/Deno creator) to commercialize the open-source Deno runtime via Deno Deploy/Sandbox/Subhosting. Not a subsidiary of a larger company; independently venture-backed. No evidence of acquisition, IPO, or a priced round after the 2022 Series A was found."
 },
 "id": "deno-sandbox",
 "name": "Deno Sandbox",
 "url": "https://deno.com/deploy/pricing",
 "category": "agent-sandbox",
 "isolation": "firecracker",
 "modes": [
  {
   "key": "on-demand",
   "label": "Sandbox microVM (2 vCPU fixed), active CPU + allocated memory",
   "flags": [],
   "os": [
    "linux"
   ],
   "regions": [
    "us",
    "eu"
   ],
   "gpu_only": false,
   "features": {
    "isolation": "firecracker"
   },
   "pricing": "resource",
   "vcpu_h": 0.1,
   "ram_gib_h": 0.025,
   "cpu_basis": "active",
   "ram_basis": "alloc",
   "active_floor": 0,
   "ram_per_vcpu": [
    0.375,
    2
   ],
   "ram_fixed_per_vcpu": null,
   "vcpu_options": [
    2
   ],
   "min_vcpu": 2,
   "max_vcpu": 2,
   "max_ram_gib": 4,
   "sizes": null,
   "pool_tiers": null,
   "requires_always_on": false,
   "always_on_month_per_instance": null,
   "commit_note": null,
   "min_billed_seconds": null,
   "granularity_s": null,
   "start_fee": 0,
   "boot_overhead_s": null,
   "multiplier": 1,
   "windows_vcpu_h": null,
   "gpu": null,
   "note": "CPU billed on CPU time actually consumed ($0.10/CPU-h); memory billed on configured allocation (768 MB-4 GB, default 1.2 GiB) for every second the sandbox lives. Shape is fixed at 2 vCPU. Lifetime max 30 min ('session' default dies with the client; duration timeouts keep billing memory until they expire). Draws down the plan's shared Deploy meters first (Pro 50 CPU-h / 750 GiB-h; Builder 500 / 7,500). Granularity/minimum unpublished. Basis verified 2026-09-28: \"You're only billed for CPU while your app is actively running code. CPU isn't consumed while your app is waiting for incoming requests or blocked on network I/O.\" ; \"Sandbox compute bills through the same CPU, memory, and egress meters at your plan's rates\" (https://deno.com/deploy/pricing). Memory billed on allocation per second loaded."
  }
 ],
 "storage": {
  "included_disk_gib": 10,
  "disk_gib_month": null,
  "disk_billed_when_stopped": false,
  "snapshot_gib_month": 0.2,
  "paused_ram_billed": false
 },
 "network": {
  "egress_free_gib": 200,
  "egress_gib": 0.2,
  "ipv4_month": null,
  "ipv4_available": false,
  "internet": {
   "default": "configurable",
   "evidence": [
    {
     "quote": "By default, Deno Sandbox has unrestricted outbound network access.",
     "url": "https://docs.deno.com/sandbox/security/"
    },
    {
     "quote": "Any outbound request to a host not in the allow list will be blocked when `allowNet` is provided.",
     "url": "https://docs.deno.com/sandbox/security/"
    },
    {
     "quote": "200GiB (then $0.20/GiB)",
     "url": "https://deno.com/deploy/pricing"
    }
   ]
  }
 },
 "plans": [
  {
   "name": "Free",
   "fee": 0,
   "flags": [],
   "fee_is_credit": false,
   "included_usd": 0,
   "per_seat": 0,
   "concurrency": 0,
   "max_session_h": 0.5,
   "max_vcpu": 2,
   "max_ram_gib": 4,
   "sizes_allowed": null,
   "note": "Sandboxes not included on Free (Deploy apps only; hard cut-off at limits)."
  },
  {
   "name": "Pro",
   "fee": 20,
   "flags": [],
   "fee_is_credit": false,
   "included_usd": 23.75,
   "per_seat": 0,
   "concurrency": 3,
   "max_session_h": 0.5,
   "max_vcpu": 2,
   "max_ram_gib": 4,
   "sizes_allowed": null,
   "note": "Fee is not credit but bundles meter allowances shared with Deploy apps: 50 CPU-h ($5) + 750 GiB-h memory ($18.75) = included_usd 23.75 (only valid if usage splits across both meters), plus 200 GiB egress and 5 GiB volumes. Concurrency 3 sandboxes PER REGION (ams + ord = 6 total); docs still say 5/org pre-release. 10 team members."
  },
  {
   "name": "Builder",
   "fee": 200,
   "flags": [],
   "fee_is_credit": false,
   "included_usd": 237.5,
   "per_seat": 0,
   "concurrency": 20,
   "max_session_h": 0.5,
   "max_vcpu": 2,
   "max_ram_gib": 4,
   "sizes_allowed": null,
   "note": "Allowances: 500 CPU-h ($50) + 7,500 GiB-h ($187.50) = 237.5, plus 2,000 GiB egress and 50 GiB volumes. 20 concurrent per region (40 across ams + ord). 25 team members."
  },
  {
   "name": "Enterprise",
   "fee": null,
   "flags": [
    "sales"
   ],
   "fee_is_credit": null,
   "included_usd": null,
   "per_seat": null,
   "concurrency": null,
   "max_session_h": null,
   "max_vcpu": null,
   "max_ram_gib": null,
   "sizes_allowed": null,
   "note": "Custom limits/rates, 99.95% SLA, SOC2 report + DPA, HIPAA BAA on request. Unpublished."
  }
 ],
 "free": {
  "monthly_credit": 0,
  "one_time_credit": 0
 },
 "features": {
  "linux": true,
  "windows": false,
  "macos": false,
  "arm64": false,
  "gpu": false,
  "gpu_types": [],
  "snapshot": "fs",
  "pause_resume": false,
  "fork": false,
  "persistent_disk": true,
  "volumes": true,
  "auto_stop_idle": false,
  "max_session_h": 0.5,
  "custom_image": true,
  "docker_inside": null,
  "nested_virt": false,
  "root": true,
  "systemd": null,
  "browser": false,
  "desktop": false,
  "computer_use": false,
  "code_interpreter": false,
  "agent_harnesses": true,
  "ssh": true,
  "public_ipv4": false,
  "inbound_https": true,
  "custom_domain": false,
  "raw_tcp_inbound": false,
  "egress_allowlist": true,
  "static_egress_ip": false,
  "private_network": null,
  "self_host": false,
  "byoc": false,
  "open_source": false,
  "regions": [
   "us",
   "eu"
  ],
  "soc2": true,
  "hipaa": true,
  "sso": false,
  "lang_python": false,
  "lang_node": false,
  "lang_go": null,
  "lang_rust": null,
  "lang_java": null,
  "gpu_desktop": false,
  "credential_injection": true,
  "egress_http_rules": false,
  "wake_on_request": false,
  "live_resize": false,
  "fork_running": false,
  "memory_snapshot_fork": false,
  "webhooks": null,
  "scheduled_wakeups": null,
  "audit_logs": null,
  "eu_data_residency": true,
  "zero_data_retention": null,
  "scoped_api_keys": null,
  "spend_limits": true,
  "mcp_server": false,
  "isolation": "firecracker",
  "image_oci": false,
  "snapshot_auto": false,
  "snapshot_on_demand": true,
  "harness_api": false,
  "egress_allowlist_level": "both",
  "ingress_rules": true,
  "guest_firewall": true,
  "secret_proxy": "any-http",
  "volume_attach": true,
  "volume_shared": false,
  "anti_bot": false,
  "captcha_solving": false,
  "egress_ip_type": "datacenter",
  "own_agent_api": false,
  "open_internet": true,
  "usage_api": false
 },
 "perf": {
  "cpu_runs_s": null,
  "cold_start_ms": null,
  "burst_tti_ms": null,
  "dax_s": null
 },
 "perf_source": "No benchmark row: provider is not in ComputeSDK results or the HPC run (as of 2026-09-28). See research/perf-map.json.",
 "knobs": [
  {
   "id": "cpu_busy_share",
   "label": "Share of sandbox lifetime the CPU is busy",
   "kind": "slider",
   "min": 0.05,
   "max": 1,
   "step": 0.05,
   "default": 0.3,
   "unit": "%",
   "options": null,
   "effect": "cpu_util",
   "modes": [
    "on-demand"
   ],
   "why": "Deno bills CPU only while code executes (I/O wait and idle are free); memory still bills for the whole lifetime."
  }
 ],
 "caveats": [
  "Hard shape: 2 vCPU fixed, 768 MB-4 GB memory, 10 GB ephemeral disk. 4 vCPU / 8 GiB workloads are infeasible.",
  "Lifetime max 30 min per docs (extendTimeout exists but docs still state the 30-min bound); longer work must re-create sandboxes or be promoted to a Deploy app.",
  "Plan allowances are shared with Deploy apps and are meter-specific (CPU-h, GiB-h, egress, volumes); included_usd is the $ value of CPU+memory allowances and is only exact if both meters are fully used.",
  "Concurrency is per region (Pro 3, Builder 20); docs say 5/org during pre-release. Plan 'concurrency' is the per-region number.",
  "Egress free allowance is plan-dependent (Free 20 / Pro 200 / Builder 2,000 GiB); card uses the Pro 200 GiB.",
  "Snapshots are read-only images of volumes; separate snapshot billing not published — modeled at the $0.20/GiB-mo volume rate (5 GiB Pro / 50 GiB Builder free not modeled). Volumes only in ord (Chicago).",
  "Dated change: launch prices (2026-02-03) were $0.05/CPU-h and $0.016/GB-h with Pro including 40 CPU-h + 1,000 GB-h; now $0.10 and $0.025 via shared Deploy meters. Effective date of the increase not found.",
  "Billing granularity / minimum per sandbox unpublished. No start fee published.",
  "SOC2/ISO27001 claimed in FAQ; SOC2 report/DPA are Enterprise-only on the pricing table. HIPAA BAA enterprise contracts only.",
  "No benchmark data in benchmarks.json (vendor claims <200 ms start, demo 93 ms).",
  "Pricing page footnote reads '*Additional pricing applies for Deno Sandboxes. See the Deno Sandbox page for details.' while the same table says sandbox compute 'bills through the same CPU, memory, and egress meters at your plan's rates'. The Sandbox page only lists $0.10/CPU-hr, $0.025/GiB-hr and $0.20/GiB-month volume usage, i.e. no extra sandbox-only fee is published today.",
  "Free orgs are limited to restricted Free-plan limits until a credit card is linked (org verification); Free cannot use Sandboxes at all, so the effective entry price for Sandbox is the $20 Pro fee.",
  "Docs conflict on default egress: /sandbox/create says the default sandbox has 'no outbound network access', /sandbox/security says 'When allowNet is omitted, all outbound requests are allowed.'",
  "Custom images: only via bootable volumes created 'from: builtin:debian-13' and then snapshotted (the only base image); snapshots and bootable volumes are region-bound (volumes only in ord).",
  "Pricing table lists 'SOC2 Type 1' (not Type 2) and DPA only under Enterprise; FAQ says 'Deno Deploy is SOC2 and ISO27001 certified'. features.soc2=true kept, but it is Type 1."
 ],
 "sources": [
  "https://deno.com/deploy/pricing",
  "https://deno.com/sandbox",
  "https://deno.com/deploy/sandbox",
  "https://deno.com/blog/introducing-deno-sandbox",
  "https://docs.deno.com/sandbox/",
  "https://docs.deno.com/sandbox/timeouts",
  "https://docs.deno.com/sandbox/volumes/",
  "https://github.com/robhunter/agentdeals/pull/2115"
 ],
 "fleet": {
  "default_max_instances": 0,
  "default_max_vcpu": null,
  "default_max_gpus": null,
  "raise": "self-serve",
  "raise_time_days": null,
  "verification": null,
  "tiers": "Current Deploy pricing: Free no sandbox access; Pro 3 concurrent per org per region; Builder 20; Enterprise custom.",
  "notes": "Sandbox overview still says prerelease default 5 and contact deploy@deno.com for an increase. Treat as a documentation conflict, not a current universal default. Current pricing governs new plans; 10 fits Builder, 50/300/1,000 need Enterprise/contact.",
  "sources": [
   "https://deno.com/deploy/pricing",
   "https://docs.deno.com/sandbox/"
  ],
  "researched": "2026-09-28"
 },
 "audit_2026_09_29": {
  "applied": 5,
  "source": "checked against the provider's live pricing and docs pages",
  "reviewed": 2
 },
 "feature_evidence": {
  "snapshot_auto": {
   "value": false,
   "source": "https://docs.deno.com/sandbox/security/",
   "quote": "Once the last reference to a sandbox is dropped (or `sandbox.kill()` is called), the VM is destroyed and the disk wiped, preventing lingering state.",
   "note": "Ephemeral by design; nothing is saved at timeout/kill. Only data on explicitly mounted volumes (or a writable bootable root volume) persists, which is persistent storage, not a snapshot. No pause/sleep.",
   "checked": "2026-09-29"
  },
  "snapshot_on_demand": {
   "value": true,
   "source": "https://docs.deno.com/sandbox/volumes/",
   "quote": "Snapshots are read-only images created from volumes. When a sandbox boots with a snapshot as its root, the entire filesystem is replaced with the snapshot contents.",
   "note": "Disk only, and only of a volume (e.g. a bootable volume created from builtin:debian-13 and used as a sandbox's writable root): client.volumes.snapshot() / `deno sandbox snapshots create`. No memory. New sandboxes boot from it (root: snapshot) and many can use it simultaneously; writable volumes can be created from it (copy-on-write fork). No snapshot of the default ephemeral root disk; whether a volume can be snapshotted while mounted in a running sandbox is not stated. Region-bound (volumes only in ord).",
   "checked": "2026-09-29"
  },
  "harness_api": {
   "value": false,
   "source": "https://deno.com/sandbox",
   "quote": "await sandbox.sh`claude -p hello`;",
   "note": "Landing page shows a 'claude' root image with Claude Code driven through the generic sh/spawn exec API; no first-party prompt/session/event API for agent harnesses found in docs or the Python SDK.",
   "checked": "2026-09-29"
  },
  "egress_allowlist": {
   "value": true,
   "source": "https://docs.deno.com/sandbox/security/",
   "quote": "Any outbound request to a host not in the allow list will be blocked when `allowNet` is provided. When `allowNet` is omitted, all outbound requests are allowed.",
   "note": "allowNet patterns: exact hostname, hostname:port, *.wildcard subdomain, exact IPv4, exact IPv6 (no CIDRs listed). Enforced by an outbound proxy 'at the VM boundary' (blog). Docs conflict on default: create page says default has 'no outbound network access', security page says unrestricted when allowNet omitted.",
   "checked": "2026-09-29",
   "level": "both"
  },
  "egress_http_rules": {
   "value": false,
   "source": "https://deno.com/blog/introducing-deno-sandbox",
   "quote": "We plan to add more capabilities here: analytics for outbound connections and programmatic hooks for trusted code to inspect or modify requests.",
   "note": "Only host(/port) allowlist today; no method/path/header rules in docs or current SDK create options (allow_net, secrets only). Deno's separate open-source Claw Patrol gateway does HCL rules but is a self-hosted product, not a Sandbox feature.",
   "checked": "2026-09-29"
  },
  "ingress_rules": {
   "value": true,
   "source": "https://docs.deno.com/sandbox/expose_http/",
   "quote": "When you call this API, the target HTTP service will be PUBLICLY EXPOSED WITHOUT AUTHENTICATION. Anyone with knowledge of the public domain will be able to send requests to the exposed service.",
   "note": "Weak: the only control is choosing which port to expose (port option or exposeHttp({port})) and opt-in SSH; nothing is exposed by default. Exposed URLs are public, unauthenticated, random long *.sandbox.deno.net hostnames; no IP allowlist or auth option.",
   "checked": "2026-09-29"
  },
  "guest_firewall": {
   "value": true,
   "source": null,
   "quote": null,
   "note": "Each sandbox is its own Firecracker microVM ('Each sandbox runs in its own Firecracker microVM' - deno.com/sandbox) and the landing-page `ls -lh /` shows a root-owned rootfs; iptables/nftables inside not documented.",
   "checked": "2026-09-29",
   "derived": true
  },
  "secret_proxy": {
   "value": "any-http",
   "source": "https://docs.deno.com/sandbox/security/",
   "quote": "Secrets never enter the sandbox environment variables. Instead, Deno Deploy substitutes them only when the sandbox makes outbound requests to an approved host.",
   "note": "Arbitrary secrets bound to arbitrary host lists (secrets: {NAME: {hosts, value}}); sandbox sees a DENO_SECRET_PLACEHOLDER_... value. SDK: 'Secret environment variables injected on the wire for HTTPS requests.' HTTP(S) only; non-HTTP protocols (DB, SSH, git over ssh) not covered.",
   "checked": "2026-09-29"
  },
  "volume_attach": {
   "value": true,
   "source": "https://docs.deno.com/sandbox/volumes/",
   "quote": "Persistent volumes let you attach regional block storage to a sandbox so data survives process restarts and new connections.",
   "note": "Read-write block volumes 300 MB-20 GB, mounted at any path via volumes: {path: slug}; only region ord (Chicago); $0.20/GiB-mo.",
   "checked": "2026-09-29"
  },
  "volume_shared": {
   "value": false,
   "source": "https://docs.deno.com/sandbox/volumes/",
   "quote": "| Concurrent use | One sandbox at a time               | Many sandboxes simultaneously      |",
   "note": "Volumes: one sandbox at a time. Snapshots (read-only) can be used by many sandboxes simultaneously but only as the root filesystem, not as a shared data mount.",
   "checked": "2026-09-29"
  },
  "browser": {
   "value": false,
   "source": "https://deno.com/sandbox",
   "quote": "Deno Sandbox brings instant Linux microVMs to Deno Deploy... Any Linux binary. Deno is pre-installed, so TypeScript and JavaScript run out of the box with no setup.",
   "note": "not offered: outside the product's scope. Sandbox is a generic code-execution microVM (Deno preinstalled); no managed/preinstalled browser or browser SDK is documented.",
   "checked": "2026-09-30"
  },
  "anti_bot": {
   "value": false,
   "source": "https://deno.com/sandbox",
   "quote": "Deno Sandbox is an SDK for instantly creating and managing secure, isolated VMs in the cloud on Deno Deploy.",
   "note": "not offered: outside the product's scope. Product is generic untrusted-code execution infrastructure, not a browser-automation/scraping product; no stealth/fingerprinting features documented.",
   "checked": "2026-09-30"
  },
  "captcha_solving": {
   "value": false,
   "source": "https://deno.com/sandbox",
   "quote": "Deno Sandbox is an SDK for instantly creating and managing secure, isolated VMs in the cloud on Deno Deploy.",
   "note": "not offered: outside the product's scope. No CAPTCHA-solving capability documented; product is a general code-execution sandbox, not a scraping/automation service.",
   "checked": "2026-09-30"
  },
  "egress_ip_type": {
   "value": "datacenter",
   "source": "https://deno.com/blog/introducing-deno-sandbox",
   "quote": "Any request to an unlisted host gets blocked at the VM boundary. Both features are implemented via an outbound proxy similar to coder/httpjail.",
   "note": "derived: outbound traffic is mediated by a shared outbound proxy on Deno Deploy's own multi-tenant edge infrastructure (datacenter IPs), not residential/mobile IPs. No dedicated/static IP per sandbox is documented (network.ipv4_available is false on the card).",
   "checked": "2026-09-30"
  },
  "live_resize": {
   "value": false,
   "source": "https://docs.deno.com/sandbox/create/",
   "quote": "memoryMb / memory_mb — Allocate between 768 and 4096 MB of RAM for memory-heavy tasks or tighter budgets.",
   "note": "Memory (and the fixed 2 vCPU shape) is only configurable via the options object passed to Sandbox.create() at creation time; there is no documented API to change CPU/RAM of an already-running sandbox without recreating it.",
   "checked": "2026-09-30"
  },
  "agent_harnesses": {
   "value": true,
   "source": "https://deno.com/sandbox",
   "quote": "await using sandbox = await Sandbox.create({ root: \"claude\", ... }); await sandbox.sh`claude -p hello`;",
   "note": "The landing page shows creating a sandbox with root: \"claude\", a pre-built root filesystem template with Claude Code installed, then invoking `claude -p hello` directly. Not documented in the create()/reference pages' options table (root isn't listed there), so treated as medium confidence.",
   "checked": "2026-09-30"
  },
  "own_agent_api": {
   "value": false,
   "source": "https://deno.com/sandbox",
   "quote": "Deno Sandbox brings instant Linux microVMs to Deno Deploy. Each sandbox boots in under a second, is API driven from the @deno/sandbox SDK, and is torn down as soon as you are done.",
   "note": "not offered: outside the product's scope. Deno Sandbox is generic compute infrastructure for running your own (or third-party) agents/code; it does not offer a first-party browser/computer-use/research agent of its own.",
   "checked": "2026-09-30"
  },
  "mcp_server": {
   "value": false,
   "source": "https://docs.deno.com/sandbox/",
   "quote": "Fully API driven: create, run commands, and tear down from code",
   "note": "Only a JS/TS SDK (@deno/sandbox), a Python SDK (deno-sandbox), and a REST API are documented for controlling sandboxes; no first-party MCP server for the Sandbox product was found on docs.deno.com or deno.com.",
   "checked": "2026-09-30"
  },
  "lang_python": {
   "value": false,
   "source": "https://deno.com/sandbox",
   "quote": "Any Linux binary. Deno is pre-installed, so TypeScript and JavaScript run out of the box with no setup.",
   "note": "The default sandbox root image (builtin:debian-13) only guarantees Deno preinstalled; Python is not listed as preinstalled runtime inside the sandbox (the Python SDK is a client library for controlling sandboxes from your own machine, not a runtime inside the VM). Not explicitly documented as absent, so medium confidence.",
   "checked": "2026-09-30"
  },
  "lang_node": {
   "value": false,
   "source": "https://docs.deno.com/sandbox/volumes/",
   "quote": "await sandbox.sh`apt-get update && apt-get install -y nodejs npm`;",
   "note": "Docs show installing Node.js and npm via apt-get as a setup step (then snapshotting it) rather than it being present out of the box; combined with the FAQ stating only Deno is pre-installed. Deno itself provides Node.js/npm compatibility (npm: specifiers, node: built-ins) but the actual node binary is not preinstalled by default.",
   "checked": "2026-09-30"
  },
  "static_egress_ip": {
   "value": false,
   "source": "https://deno.com/blog/introducing-deno-sandbox",
   "quote": "Both features are implemented via an outbound proxy similar to coder/httpjail.",
   "note": "not offered: no dedicated/static egress IP per sandbox is documented; outbound traffic passes through a shared outbound proxy on Deno Deploy's multi-tenant edge, and network.ipv4_available is false for the product overall.",
   "checked": "2026-09-30"
  },
  "sso": {
   "value": false,
   "source": "https://deno.com/deploy/pricing",
   "quote": "Enterprise ... Reliability SLA: 99.95% ... Compliance SOC2 Type 1: Yes DPA: Yes",
   "note": "The pricing page enumerates Enterprise-tier extras in detail (SLA, onboarding support, SOC2 report, DPA) but lists no SSO/SAML/OIDC row on any plan, including Enterprise; no SSO/SAML mention found on the enterprise or security pages either.",
   "checked": "2026-09-30"
  },
  "persistent_disk": {
   "value": true,
   "corrected_from": false,
   "source": "https://docs.deno.com/sandbox/volumes/",
   "quote": "Persistent volumes let you attach regional block storage to a sandbox so data survives process restarts and new connections. ... A new sandbox—possibly started hours later—can read the same file",
   "note": "Contradiction confirmed as described: landing page even lists 'Persistent file system' as a headline feature. Opt-in only (default ephemeral root disk is wiped on kill: 'the VM is destroyed and the disk wiped'); persistence requires explicitly mounting a volume (region ord only, 300MB-20GB). Correct value: persistent_disk=true, default off.",
   "checked": "2026-09-30"
  },
  "pause_resume": {
   "value": false,
   "source": "https://docs.deno.com/sandbox/timeouts/",
   "quote": "With no options set, the sandbox lives for the duration of your script. Once the sandbox instance is closed, the microVM shuts down and frees all resources. ... await sandbox.kill() immediately stops the VM and releases the lifetime",
   "note": "Only lifecycle controls are create/timeout/extendTimeout/connect/kill; a sandbox keeps running (billing continues) until it is killed or its timeout elapses, then it is destroyed. No pause/freeze-and-resume primitive with paused/reduced billing exists.",
   "checked": "2026-09-30"
  },
  "fork": {
   "value": false,
   "source": "https://docs.deno.com/sandbox/volumes/",
   "quote": "Snapshots are read-only images created from volumes. When a sandbox boots with a snapshot as its root, the entire filesystem is replaced with the snapshot contents.",
   "note": "The only clone-like primitive is booting a new sandbox from a disk snapshot of a volume (or creating a new writable volume from a snapshot) — this clones a disk image, not a whole running machine. No API to clone an existing sandbox instance itself.",
   "checked": "2026-09-30"
  },
  "fork_running": {
   "value": false,
   "source": "https://docs.deno.com/sandbox/volumes/",
   "quote": "A volume is bootable when created with the from option. Currently builtin:debian-13 is the only available base image.",
   "note": "No documented mechanism to clone an already-running sandbox without stopping it; cloning is limited to snapshotting a volume and booting a fresh sandbox from it.",
   "checked": "2026-09-30"
  },
  "memory_snapshot_fork": {
   "value": false,
   "source": "https://docs.deno.com/sandbox/volumes/",
   "quote": "Snapshots are read-only images created from volumes.",
   "note": "Snapshots are disk-only (filesystem of a volume); no mention anywhere in docs/SDK of capturing or restoring in-memory process state, so a clone cannot resume running processes.",
   "checked": "2026-09-30"
  },
  "desktop": {
   "value": false,
   "source": "https://deno.com/sandbox",
   "quote": "On-demand editing. Instantly access a disposable editor for demos or remote debugging sandbox.exposeVscode()",
   "note": "Only exposed surfaces are HTTP dev-server preview, SSH, and a browser-based VS Code editor (exposeVscode) — no VNC/RDP full graphical desktop is offered.",
   "checked": "2026-09-30"
  },
  "computer_use": {
   "value": false,
   "source": "https://deno.com/sandbox",
   "quote": "await sandbox.sh`claude -p hello`;",
   "note": "Agent/AI use is via a plain shell/exec API (sh, spawn) and file I/O; there is no screenshot+click computer-use API and no GUI/desktop to drive with one.",
   "checked": "2026-09-30"
  },
  "image_oci": {
   "value": false,
   "source": "https://docs.deno.com/sandbox/volumes/",
   "quote": "A volume is bootable when created with the from option. Currently builtin:debian-13 is the only available base image.",
   "note": "Custom images are supported only as a bootable volume built from Deno's single builtin Debian base image plus your install steps, then snapshotted; there is no way to start a sandbox from an arbitrary Docker/OCI image.",
   "checked": "2026-09-30"
  },
  "wake_on_request": {
   "value": false,
   "source": "https://docs.deno.com/sandbox/timeouts/",
   "quote": "Sandbox.connect({ id }) – resume control of a duration-based sandbox.",
   "note": "A sandbox with a duration timeout keeps running (and billing) until it's explicitly killed or the timeout elapses; reconnect (Sandbox.connect) re-attaches a client to a still-running sandbox, it does not wake a stopped/sleeping one on an incoming request.",
   "checked": "2026-09-30"
  },
  "auto_stop_idle": {
   "value": false,
   "source": "https://docs.deno.com/sandbox/timeouts/",
   "quote": "Default timeout: \"session\" ... With no options set, the sandbox lives for the duration of your script.",
   "note": "Lifetime is governed only by explicit fixed timeouts (session-bound or duration string) and kill(); there's no idle-detection auto-stop that shortens billing when the sandbox is quiet but not yet at its timeout.",
   "checked": "2026-09-30"
  },
  "public_ipv4": {
   "value": false,
   "source": "https://docs.deno.com/sandbox/",
   "quote": "Fully API driven: create, run commands, and tear down from code ... Able to access durable storage via volumes",
   "note": "Sandboxes are reached only via provider-issued random *.sandbox.deno.net HTTPS URLs (exposeHttp) or SSH tunneling (exposeSsh); no dedicated public IPv4 address per sandbox is offered or documented anywhere.",
   "checked": "2026-09-30"
  },
  "gpu": {
   "value": false,
   "source": "https://deno.com/sandbox",
   "quote": "Each Deno Sandbox is a lightweight Linux microVM running on Deno Deploy ... Each sandbox runs in its own Firecracker microVM",
   "note": "Product is a CPU-only Firecracker microVM for running untrusted code/agents; no GPU option is mentioned anywhere in docs, pricing, or SDK. Outside the product's scope.",
   "checked": "2026-09-30"
  },
  "windows": {
   "value": false,
   "source": "https://deno.com/sandbox",
   "quote": "Deno Sandbox is an SDK for instantly creating and managing secure, isolated VMs in the cloud on Deno Deploy. Every Sandbox is an independent Linux microVM.",
   "note": "Only Linux microVMs are offered; Windows machines aren't part of this product.",
   "checked": "2026-09-30"
  },
  "macos": {
   "value": false,
   "source": "https://deno.com/sandbox",
   "quote": "Every Sandbox is an independent Linux microVM.",
   "note": "Only Linux microVMs; no macOS machines offered.",
   "checked": "2026-09-30"
  },
  "arm64": {
   "value": false,
   "source": "https://docs.deno.com/sandbox/create/",
   "quote": "Available options: region, allowNet, secrets, memoryMb, timeout, labels, env",
   "note": "not offered: Sandbox.create()'s full options table (region, allowNet, secrets, memoryMb, timeout, labels, env) has no architecture/CPU-type field, and no Deno Sandbox page (landing page, docs, pricing, FAQ) ever mentions choosing or offering ARM64/Apple-Silicon sandboxes; the fixed shape is described only as '2 vCPU'. (Deno Deploy's separate serverless *app* runtime/build environment does run on x64 or ARM64, but that is a different product from Sandbox and is not exposed as a Sandbox option.)",
   "checked": "2026-09-30"
  },
  "self_host": {
   "value": false,
   "source": "https://deno.com/deploy/pricing",
   "quote": "Sandbox compute bills through the same CPU, memory, and egress meters at your plan's rates",
   "note": "Deno Sandbox is only offered as a hosted service on Deno Deploy's own infrastructure/pricing plans; there is no self-hosted distribution of the Sandbox orchestration product itself (distinct from the open-source Deno runtime or Claw Patrol).",
   "checked": "2026-09-30"
  },
  "byoc": {
   "value": false,
   "source": "https://deno.com/deploy/pricing",
   "quote": "Sandbox compute bills through the same CPU, memory, and egress meters at your plan's rates",
   "note": "No bring-your-own-cloud / managed-in-your-account deployment is documented; even Enterprise is described only as custom limits/rates/SLA on Deno's own infrastructure, not a BYOC deployment model.",
   "checked": "2026-09-30"
  },
  "open_source": {
   "value": false,
   "source": "https://deno.com/sandbox",
   "quote": "Open Source: Deno / Fresh / Claw Patrol / JSR ... Commercial: Deno Deploy / Deno Sandbox / Subhosting / Deno for Enterprise",
   "note": "Deno's own site categorizes Deno Sandbox under 'Commercial' products, separate from the 'Open Source' group (Deno runtime, Fresh, Claw Patrol, JSR); the Sandbox orchestration service/SDK itself is not published under an OSI license.",
   "checked": "2026-09-30"
  },
  "nested_virt": {
   "value": false,
   "source": "https://deno.com/sandbox",
   "quote": "Each sandbox runs in its own Firecracker microVM—the same technology that powers AWS Lambda.",
   "note": "derived: Firecracker microVMs (as used by AWS Lambda and similarly by other providers) do not expose /dev/kvm or nested hardware virtualization to the guest by default, and no Deno page documents KVM/nested-virtualization support inside a sandbox. No first-party confirmation either way was found, so this is a derived inference from the disclosed isolation technology rather than an explicit statement.",
   "checked": "2026-09-30"
  },
  "usage_api": {
   "value": false,
   "source": "https://deno.com/deploy/pricing",
   "quote": "Sandbox compute bills through the same CPU, memory, and egress meters at your plan's rates. Billing granularity / minimum per sandbox unpublished.",
   "note": "granularity: account-only; cost: no; Deno Sandbox bills CPU and memory through shared Deploy plan meters (Pro 50 CPU-h + 750 GiB-h; Builder 500 + 7,500) with no documented API to query usage per sandbox, by tag, or by project. The SDK and REST API control sandbox lifecycle only; no billing/usage endpoint is documented. Invoicing and usage are visible only in the account dashboard.",
   "confidence": "high",
   "checked": "2026-10-01"
  }
 },
 "locations": [
  {
   "country": "US",
   "state": "IL",
   "city": "Chicago",
   "provider_region": "ord",
   "self_serve": true,
   "choosable": true
  },
  {
   "country": "NL",
   "state": null,
   "city": "Amsterdam",
   "provider_region": "ams",
   "self_serve": true,
   "choosable": true
  }
 ],
 "locations_source": "https://docs.deno.com/sandbox/",
 "locations_quote": "ams - Amsterdam, Netherlands; ord - Chicago, USA. You can specify the region where the sandbox will be created when creating a new sandbox.",
 "locations_checked": "2026-10-01"
}