{
 "features_resolved": {
  "snapshot_any": true,
  "snapshot_mem": false,
  "fork": false,
  "pause_resume": true,
  "persistent_disk": false,
  "whole_disk": null,
  "persist_scope": null,
  "volumes": false,
  "auto_stop_idle": true,
  "long_sessions": true,
  "custom_image": true,
  "image_snapshot": true,
  "image_oci": false,
  "vm_isolation": true,
  "docker_inside": true,
  "nested_virt": false,
  "root": null,
  "systemd": null,
  "browser": true,
  "desktop": true,
  "computer_use": true,
  "code_interpreter": null,
  "browser_control": null,
  "desktop_control": null,
  "browser_and_desktop": true,
  "anti_bot": false,
  "captcha_solving": false,
  "residential_ip": false,
  "agent_harnesses": true,
  "ssh": false,
  "public_ipv4": false,
  "inbound_https": true,
  "custom_domain": null,
  "raw_tcp_inbound": null,
  "egress_allowlist": true,
  "open_internet": true,
  "static_egress_ip": false,
  "private_network": null,
  "self_host": true,
  "byoc": true,
  "open_source": false,
  "soc2": false,
  "hipaa": false,
  "sso": null,
  "gpu": false,
  "arm64": false,
  "windows": false,
  "macos": false,
  "lang_python": true,
  "lang_node": true,
  "lang_go": null,
  "lang_rust": null,
  "lang_java": null,
  "gpu_desktop": null,
  "credential_injection": true,
  "egress_http_rules": true,
  "wake_on_request": false,
  "live_resize": false,
  "fork_running": false,
  "memory_snapshot_fork": false,
  "webhooks": true,
  "scheduled_wakeups": null,
  "audit_logs": true,
  "eu_data_residency": true,
  "zero_data_retention": null,
  "scoped_api_keys": null,
  "spend_limits": true,
  "mcp_server": false,
  "usage_api": false,
  "snapshot_auto": false,
  "snapshot_on_demand": false,
  "harness_api": false,
  "own_agent_api": false,
  "fast_boot": null,
  "strong_isolation": true,
  "ingress_rules": true,
  "guest_firewall": true,
  "secret_proxy": true,
  "secret_proxy_any": false,
  "volume_attach": false,
  "volume_shared": false,
  "sidecar": null,
  "fuse": true,
  "kernel_features": true,
  "burst": null
 },
 "company": {
  "id": "omnirun",
  "checked": "2026-09-30",
  "company": "OmniRun (A14A B.V.)",
  "ownership": {
   "value": "subsidiary",
   "parent": "A14A B.V.",
   "source": "https://omnirun.io/about",
   "quote": "OmniRun is built and operated by A14A B.V. Sandboxes run in Hetzner data centers in Germany, and all data stays in the EU."
  },
  "stage": {
   "value": "bootstrapped",
   "source": "https://a14a.org",
   "quote": "A14A is a venture builder that partners with corporations to create new companies. We handle the full stack: from idea validation through launch and scale. ... OmniRun Cloud sandbox platform providing isolated Firecracker microVMs for safely running AI agent code with sub-second boot times.",
   "confidence": "medium",
   "note": "No external funding round, investor, or accelerator mention found for OmniRun or its parent A14A B.V. anywhere (company pages, GitHub org, HN Algolia search). OmniRun is one of roughly 20 in-house products built by A14A, a small Amsterdam-based venture builder/studio (GitHub org founded 2020, 2 followers), consistent with an internally-funded, bootstrapped studio project rather than a VC-backed standalone startup. No press coverage or Crunchbase/PitchBook profile was found for OmniRun or A14A within the search time budget, so this is an inference from the absence of any funding signal plus the venture-builder structure, not a direct company statement about financing."
  },
  "accelerators": [],
  "total_funding_usd": {
   "value": null,
   "status": "unknown"
  },
  "last_round": {
   "type": null,
   "amount_usd": null,
   "date": null,
   "leads": [],
   "status": "unknown",
   "source": "",
   "quote": ""
  },
  "investors": [],
  "portfolio_listings": [],
  "revenue": {
   "value": null,
   "status": "unknown"
  },
  "employees": {
   "value": null,
   "source": "https://github.com/a14a-org"
  },
  "note": "OmniRun is not an independent startup: it is one of ~20 concurrent in-house products built by A14A B.V., a small Amsterdam venture-builder/studio (other products include DataGigant, ScalarOps, OmniClaw, Claude Skill Manager, DNSFlat, LedgerSoft, etc.), operated on Hetzner infrastructure in the EU. No funding, accelerator, or revenue information is public for OmniRun or A14A. Buyers should weigh this as a small-team, studio-run product rather than a funded, dedicated infrastructure company."
 },
 "id": "omnirun",
 "name": "OmniRun",
 "url": "https://omnirun.io/pricing",
 "category": "agent-sandbox",
 "isolation": "firecracker",
 "modes": [
  {
   "key": "managed",
   "label": "Managed OmniRun sandbox, price by agreement",
   "flags": [],
   "os": [
    "linux"
   ],
   "regions": null,
   "gpu_only": false,
   "features": {
    "isolation": "firecracker"
   },
   "pricing": "resource",
   "vcpu_h": null,
   "ram_gib_h": null,
   "cpu_basis": "alloc",
   "ram_basis": "alloc",
   "active_floor": 0,
   "ram_per_vcpu": [
    null,
    null
   ],
   "ram_fixed_per_vcpu": null,
   "vcpu_options": null,
   "min_vcpu": null,
   "max_vcpu": null,
   "max_ram_gib": null,
   "sizes": null,
   "pool_tiers": null,
   "requires_always_on": false,
   "always_on_month_per_instance": null,
   "commit_note": null,
   "min_billed_seconds": 0,
   "granularity_s": 1,
   "start_fee": null,
   "boot_overhead_s": null,
   "multiplier": 1,
   "windows_vcpu_h": null,
   "gpu": null,
   "note": "No public rate. https://omnirun.io/pricing (checked 2026-10-14) now shows only \"Managed OmniRun\": \"Managed OmniRun is arranged per client or team. There is no public price list and no self-serve plan: we size limits with you.\" and \"Agreed terms: Limits and price set with you\". llms-full.txt agrees: \"Managed by a14a: for a14a clients and teams, pricing by agreement. There is no public price list or self-serve tier.\" The former Launch EUR 0.19 and Scale EUR 0.15 per standard sandbox-hour (up to 4 vCPU / 2 GB) rates (pricing page, 2026-09-28) are gone, so vcpu_h/ram_gib_h/sizes are null. Self-hosting the same stack is free (Apache-2.0) on your own x86_64 KVM host; that is not a priced regime here.",
   "plans": [
    "Managed (by agreement)"
   ]
  }
 ],
 "storage": {
  "included_disk_gib": null,
  "disk_gib_month": null,
  "disk_billed_when_stopped": null,
  "snapshot_gib_month": null,
  "paused_ram_billed": null
 },
 "network": {
  "egress_free_gib": null,
  "egress_gib": null,
  "ipv4_month": null,
  "ipv4_available": null,
  "internet": {
   "default": "configurable",
   "evidence": [
    {
     "quote": "Internet is on or off per sandbox. Base templates start offline, and internet: false keeps them with no route out at all; agent templates always have internet on, with open egress.",
     "url": "https://omnirun.io/solutions/compliance"
    },
    {
     "quote": "Open internet, none, or a list of HTTPS hosts.",
     "url": "https://omnirun.io/pricing"
    }
   ]
  }
 },
 "plans": [
  {
   "name": "Managed (by agreement)",
   "fee": null,
   "flags": [
    "sales"
   ],
   "fee_is_credit": null,
   "included_usd": null,
   "per_seat": null,
   "concurrency": null,
   "max_session_h": null,
   "max_vcpu": null,
   "max_ram_gib": null,
   "sizes_allowed": null,
   "note": "\"Managed OmniRun is arranged per client or team. There is no public price list and no self-serve plan: we size limits with you.\" (https://omnirun.io/pricing, 2026-10-14). Sandbox limits, quotas, custom templates and price are agreed per client. The Sandbox (free, 25 h), Launch (EUR 19, 100 h), Scale (EUR 79, 600 h) and Dedicated plans published on 2026-09-28 are no longer listed."
  }
 ],
 "free": {
  "monthly_credit": null,
  "one_time_credit": null,
  "note": "No free managed tier any more (\"no self-serve plan\", https://omnirun.io/pricing, 2026-10-14); the former free Sandbox tier (25 sandbox-hours/month) is gone. Self-hosting is free: \"Self-hosted: free. The code is Apache-2.0; you run it on your own x86_64 Linux + KVM host\" (https://omnirun.io/llms-full.txt)."
 },
 "features": {
  "linux": true,
  "windows": false,
  "macos": false,
  "arm64": false,
  "gpu": false,
  "snapshot": "fs",
  "pause_resume": true,
  "fork": false,
  "persistent_disk": false,
  "volumes": null,
  "auto_stop_idle": true,
  "max_session_h": null,
  "custom_image": null,
  "docker_inside": true,
  "nested_virt": false,
  "root": null,
  "systemd": null,
  "browser": true,
  "desktop": true,
  "computer_use": true,
  "code_interpreter": null,
  "agent_harnesses": true,
  "ssh": false,
  "public_ipv4": false,
  "inbound_https": true,
  "custom_domain": null,
  "raw_tcp_inbound": null,
  "egress_allowlist": true,
  "static_egress_ip": false,
  "private_network": null,
  "self_host": true,
  "byoc": true,
  "open_source": false,
  "soc2": false,
  "hipaa": false,
  "sso": null,
  "gpu_types": [],
  "regions": [
   "eu"
  ],
  "lang_python": true,
  "lang_node": true,
  "lang_go": null,
  "lang_rust": null,
  "lang_java": null,
  "gpu_desktop": null,
  "credential_injection": true,
  "egress_http_rules": true,
  "wake_on_request": false,
  "live_resize": false,
  "fork_running": false,
  "memory_snapshot_fork": false,
  "webhooks": true,
  "scheduled_wakeups": null,
  "audit_logs": true,
  "eu_data_residency": true,
  "zero_data_retention": null,
  "scoped_api_keys": null,
  "spend_limits": true,
  "mcp_server": false,
  "isolation": "firecracker",
  "image_oci": false,
  "snapshot_on_demand": false,
  "harness_api": false,
  "egress_allowlist_level": "domain",
  "ingress_rules": true,
  "guest_firewall": true,
  "secret_proxy": "ai-only",
  "volume_attach": false,
  "volume_shared": false,
  "anti_bot": false,
  "captcha_solving": false,
  "egress_ip_type": "datacenter",
  "snapshot_auto": false,
  "own_agent_api": false,
  "open_internet": true,
  "usage_api": false
 },
 "perf": {
  "cpu_runs_s": null,
  "cold_start_ms": null,
  "burst_tti_ms": null,
  "dax_s": null
 },
 "knobs": [],
 "caveats": [
  "Unpriced since 2026-10-14: https://omnirun.io/pricing now shows only \"Managed OmniRun\" (\"Managed OmniRun is arranged per client or team. There is no public price list and no self-serve plan: we size limits with you.\"). The former Launch EUR 0.19 and Scale EUR 0.15 per standard sandbox-hour (up to 4 vCPU / 2 GB), the free Sandbox tier and Dedicated EUR 0.10/h (pricing page, 2026-09-28) are no longer used.",
  "Self-hosting is free (Apache-2.0 licence announced, installer via omnictl) on your own x86_64 KVM host; you pay your own hardware. Not modelled as a priced regime.",
  "Hosting location conflict: security, pricing and open-source pages say Finland (Hetzner); llms-full.txt still says \"Hetzner data centers in Germany (EU)\". Finland kept.",
  "Features set to null were not verified. No sandbox was purchased or tested; feature/performance statements are documentation claims. Null maximums are unknown unless a cited note explicitly states unlimited.",
  "A complete monthly bill requires known snapshot/egress/plan limits; do not silently treat missing ancillary charges as free."
 ],
 "sources": [
  "https://omnirun.io/pricing",
  "https://omnirun.io/security",
  "https://omnirun.io/open-source",
  "https://omnirun.io/docs/sandboxes",
  "https://omnirun.io/llms-full.txt",
  "https://omnirun.io/compare"
 ],
 "fleet": {
  "default_max_instances": 3,
  "default_max_vcpu": null,
  "default_max_gpus": null,
  "raise": "sales",
  "raise_time_days": null,
  "verification": "No self-serve signup for the managed service: \"A conversation, not a checkout.\" Contact hello@omnirun.io.",
  "tiers": "No public tiers; sandbox limits and quotas are agreed per client. Docs default: 3 concurrent sandboxes per user (HTTP 429 beyond).",
  "notes": "\"Each user can run up to 3 concurrent sandboxes by default. Creating a sandbox beyond this limit returns a 429 status code.\" (https://omnirun.io/docs/sandboxes, 2026-10-14). The former Sandbox 1 / Launch 3 / Scale 10 / Dedicated 50+ tiers are no longer published; 10/50/300/1,000 need a negotiated agreement.",
  "sources": [
   "https://omnirun.io/pricing",
   "https://omnirun.io/docs/sandboxes"
  ],
  "researched": "2026-10-14"
 },
 "audit_2026_09_29": {
  "applied": 10,
  "source": "checked against the provider's live pricing and docs pages",
  "reviewed": 3
 },
 "feature_evidence": {
  "snapshot_on_demand": {
   "value": false,
   "source": "https://omnirun.io/compare",
   "quote": "No fork, user snapshots or volumes yet. E2B, CubeSandbox, microsandbox and boxd all have some form of these.",
   "note": "Not a real contradiction with features.snapshot='fs': that field is the boot/restore mechanism (operator-built Firecracker filesystem snapshots give ~250ms sub-second boot restore, confirmed by llms-full.txt: 'Sub-second boot: Snapshot-based restore in ~250ms'), not a user-facing on-demand snapshot API. The compare page's capability matrix rows 'User snapshots and checkpoints' and 'Fork a running sandbox' are both explicitly 'No / Planned for v0.2' for OmniRun, and llms-full.txt roadmap confirms: 'v0.2 hibernate to disk, fork, user snapshots, template build API'. So users cannot take a snapshot/checkpoint on demand today; the false value is correct.",
   "checked": "2026-09-30"
  },
  "harness_api": {
   "value": false,
   "source": "https://omnirun.io/llms-full.txt",
   "quote": "| `claude-code` | AI tool template for Claude Code |",
   "note": "claude-code, codex, gemini-cli and openclaw templates come preinstalled, but the only way to drive them is the generic commands.run exec or PTY API. There is no prompt/stream/resume API. 'Claude Managed Agents backend' means Anthropic's API runs the agent loop and a self-hosted worker (ant beta:worker) runs the tool calls in OmniRun microVMs. That is Anthropic's harness API, not OmniRun's.",
   "checked": "2026-09-29"
  },
  "egress_allowlist": {
   "value": true,
   "source": "https://omnirun.io/docs/sandboxes",
   "quote": "an opt-in SNI egress proxy can restrict a sandbox to an allow-list of hosts: it inspects each TLS handshake on port 443 and only forwards connections whose server name matches your list. It is off by default.",
   "note": "Base templates also support internet:false ('no route out at all'). Weak: the SNI proxy filters HTTPS on port 443 only. Other ports are not filtered, and domain fronting gets past it ('a guard rail, not an exfiltration control'). Agent templates (claude-code, codex, desktop) always have internet on, and internet:false does not switch it off. SDK 0.6.0 also has an undocumented NetworkPolicy {allowDomains, denyDomains, allowIPs, denyIPs} and setNetworkPolicy() for running sandboxes. IP-level rules appear in the SDK only, not in the docs.",
   "checked": "2026-09-29",
   "level": "domain"
  },
  "ingress_rules": {
   "value": true,
   "source": "https://www.npmjs.com/package/@omnirun/sdk",
   "quote": "@param opts.visibility - `\"public\"` (default) or `\"private\"` (requires auth token).",
   "note": "Preview URLs are opt-in per port (POST /sandboxes/:id/exposures) and can be revoked. They have ttlSeconds and an optional slug. Private exposures return an accessUrl 'with embedded access token'. The docs pages only describe public HTTPS URLs; the private visibility comes from the SDK types. No IP allowlist. Traffic between sandboxes is blocked (security page). Self-hosted nodes have previews off until preview_domain is set.",
   "checked": "2026-09-29"
  },
  "guest_firewall": {
   "value": true,
   "source": null,
   "quote": null,
   "note": "Firecracker microVM with its own guest kernel; 'Guest commands run as root by default' (security page). Not documented explicitly.",
   "checked": "2026-09-29",
   "derived": true
  },
  "secret_proxy": {
   "value": "ai-only",
   "source": "https://omnirun.io/docs/llm-proxy",
   "quote": "Use hundreds of AI models through a single API key with built-in spend tracking and rate limiting. OpenAI-compatible: just change your base URL.",
   "note": "An LLM gateway at api.omnirun.io/llm/v1 that uses OmniRun's upstream keys. The sandbox authenticates with an OmniRun omr_ token, so provider keys stay outside the VM. BYOK keys and all other secrets go through the vault, which writes them INTO the VM ('all vault credentials are written to /tmp/.omnirun-env inside the sandbox'). The compare page lists 'Secrets that never enter the VM: No', and the roadmap has it under 'Later'. Nothing for non-HTTP protocols.",
   "checked": "2026-09-29"
  },
  "volume_attach": {
   "value": false,
   "source": "https://omnirun.io/compare",
   "quote": "No fork, user snapshots or volumes yet.",
   "note": "Capability matrix: 'Persistent volumes: No'. The roadmap lists persistent volumes under 'Later'. Each sandbox gets a copy-on-write LVM thin disk that is deleted on kill.",
   "checked": "2026-09-29"
  },
  "volume_shared": {
   "value": false,
   "source": "https://omnirun.io/compare",
   "quote": "No fork, user snapshots or volumes yet.",
   "note": "No volumes of any kind, so no shared volumes.",
   "checked": "2026-09-29"
  },
  "image_oci": {
   "value": false,
   "source": "https://omnirun.io/compare",
   "quote": "Bring your own image ... Partial: Operator build scripts; API planned for v0.2",
   "note": "You cannot self-serve start a sandbox from your own Docker/OCI image today. Custom images require the operator to run build scripts on the host; a self-service template-build API is only planned for v0.2. Only a fixed list of built-in templates (playground, rust, python-3.11, node-20, desktop, etc.) are creatable via the API.",
   "checked": "2026-09-30"
  },
  "nested_virt": {
   "value": false,
   "source": "https://omnirun.io/llms-full.txt",
   "quote": "Firecracker microVM — Minimal virtual machine monitor / KVM — Hardware virtualization",
   "note": "derived: KVM/Firecracker is used to run the guest kernel itself; no page mentions /dev/kvm or nested virtualization being exposed inside the guest, and Firecracker microVMs typically do not pass through hardware virtualization to the guest.",
   "checked": "2026-09-30"
  },
  "desktop": {
   "value": true,
   "source": "https://omnirun.io/llms-full.txt",
   "quote": "Desktop Sandboxes: Full Linux GUI (XFCE) with programmatic mouse/keyboard/screenshot control for AI computer use.",
   "note": null,
   "checked": "2026-09-30"
  },
  "browser": {
   "value": true,
   "source": "https://omnirun.io/docs/desktop",
   "quote": "Automated web browsing in a desktop sandbox — Firefox navigating to Hacker News and GitHub Trending",
   "note": "The desktop template's XFCE image ships Firefox, shown driven via the computer-use API.",
   "checked": "2026-09-30"
  },
  "computer_use": {
   "value": true,
   "source": "https://omnirun.io/llms-full.txt",
   "quote": "sb.desktop.screenshot() ... sb.desktop.leftClick(512, 384) ... sb.desktop.type(\"hello world\") ... sb.desktop.press(\"Return\")",
   "note": "Screenshot + mouse/keyboard control API on the desktop template.",
   "checked": "2026-09-30"
  },
  "anti_bot": {
   "value": false,
   "source": "https://omnirun.io/pricing",
   "quote": "OmniRun — Isolated Firecracker microVMs for AI agent workloads. Each sandbox gets its own kernel.",
   "note": "not offered: outside the product's scope. OmniRun is a general-purpose Firecracker sandbox/desktop product with no stealth/fingerprinting features documented anywhere on its site.",
   "checked": "2026-09-30"
  },
  "captcha_solving": {
   "value": false,
   "source": "https://omnirun.io/pricing",
   "quote": "OmniRun — Isolated Firecracker microVMs for AI agent workloads. Each sandbox gets its own kernel.",
   "note": "not offered: outside the product's scope. No CAPTCHA-solving feature is mentioned in the docs, compare page, or security page.",
   "checked": "2026-09-30"
  },
  "egress_ip_type": {
   "value": "datacenter",
   "source": "https://omnirun.io/security",
   "quote": "The managed service runs in Hetzner data centers in Finland (EU).",
   "note": "Managed service runs on Hetzner bare metal in Finland; no residential/mobile or dedicated egress-IP offering is documented, so outbound traffic is shared datacenter IP space. https://omnirun.io/llms-full.txt still says \"Hetzner data centers in Germany (EU)\"; the security, pricing and open-source pages all say Finland.",
   "checked": "2026-10-14"
  },
  "ssh": {
   "value": false,
   "source": "https://omnirun.io/compare",
   "quote": "SSH and IDE access ... No",
   "note": "Access is via the REST/SDK commands API (commands.run, PTY), not SSH.",
   "checked": "2026-09-30"
  },
  "snapshot_auto": {
   "value": false,
   "source": "https://omnirun.io/compare",
   "quote": "No hibernate to disk yet: a paused OmniRun sandbox stays in memory and does not survive a restart.",
   "note": "A sandbox's copy-on-write disk is deleted when it is killed or its timeout expires; there is no automatic save-and-restore of state on stop/sleep. Hibernate-to-disk is only planned for v0.2.",
   "checked": "2026-09-30"
  },
  "fork": {
   "value": false,
   "source": "https://omnirun.io/compare",
   "quote": "No fork, user snapshots or volumes yet. E2B, CubeSandbox, microsandbox and boxd all have some form of these.",
   "note": "Roadmap v0.2 lists 'Fork a running sandbox' and 'user snapshots' as planned, not shipped.",
   "checked": "2026-09-30"
  },
  "fork_running": {
   "value": false,
   "source": "https://omnirun.io/compare",
   "quote": "Fork a running sandbox ... No Planned for v0.2",
   "note": null,
   "checked": "2026-09-30"
  },
  "memory_snapshot_fork": {
   "value": false,
   "source": "https://omnirun.io/compare",
   "quote": "No fork, user snapshots or volumes yet.",
   "note": "No fork capability exists at all, so memory-preserving fork does not either.",
   "checked": "2026-09-30"
  },
  "pause_resume": {
   "value": true,
   "source": "https://omnirun.io/compare",
   "quote": "Pause in memory ... Yes",
   "note": "Manual pause()/resume() exists in the SDK, kept in memory only; it does not survive a host restart (no hibernate-to-disk yet).",
   "checked": "2026-09-30"
  },
  "wake_on_request": {
   "value": false,
   "source": "https://omnirun.io/llms-full.txt",
   "quote": "timeout | number | 300 | Max lifetime in seconds before auto-kill",
   "note": "Sandboxes are explicitly created via the API and torn down on timeout/idle; nothing describes a stopped/sleeping sandbox automatically waking on an inbound request (e.g. via its preview URL).",
   "checked": "2026-09-30"
  },
  "persistent_disk": {
   "value": false,
   "source": "https://omnirun.io/security",
   "quote": "Separate disks. Each sandbox gets a copy-on-write LVM thin snapshot of its template, deleted when it is killed.",
   "note": "Files do not survive the sandbox being killed or timing out; there is no volume/persistent-disk feature (compare page: 'Persistent volumes No').",
   "checked": "2026-09-30"
  },
  "live_resize": {
   "value": false,
   "source": "https://omnirun.io/compare",
   "quote": "Per-sandbox CPU and memory sizing ... No Fixed per template",
   "note": "CPU/RAM are fixed by the chosen template, not adjustable on a running sandbox.",
   "checked": "2026-09-30"
  },
  "own_agent_api": {
   "value": false,
   "source": "https://omnirun.io/llms-full.txt",
   "quote": "`openclaw` | AI agent gateway for WhatsApp/Telegram/Discord/Slack",
   "note": "not offered: outside the product's scope. OmniRun ships a generic computer-use API (screenshot/click) and an LLM proxy, plus a messaging-bot gateway template (openclaw), but no first-party task/research/browser agent that OmniRun itself runs and drives via API.",
   "checked": "2026-09-30"
  },
  "mcp_server": {
   "value": false,
   "source": "https://omnirun.io/compare",
   "quote": "MCP server ... No Planned",
   "note": "Listed as planned, not shipped.",
   "checked": "2026-09-30"
  },
  "lang_python": {
   "value": true,
   "source": "https://omnirun.io/llms-full.txt",
   "quote": "`python-3.11` | Python 3.11 ... Python SDK: coming soon",
   "note": "Python runtime is available as a built-in template; a first-party Python SDK is listed (with sync/async examples), though marked 'coming soon' in the SDK list header.",
   "checked": "2026-09-30"
  },
  "lang_node": {
   "value": true,
   "source": "https://omnirun.io/llms-full.txt",
   "quote": "`node-20` | Node.js 20 ... TypeScript/JavaScript: `npm install @omnirun/sdk`",
   "note": null,
   "checked": "2026-09-30"
  },
  "public_ipv4": {
   "value": false,
   "source": "https://omnirun.io/llms-full.txt",
   "quote": "Expose any sandbox port as a public HTTPS URL instantly. ... exposure.url // \"https://abc123.run.omnirun.io\"",
   "note": "Inbound access is via proxied HTTPS preview URLs on OmniRun's domain, not a dedicated public IPv4 address per sandbox; no public IPv4 feature is documented.",
   "checked": "2026-09-30"
  },
  "inbound_https": {
   "value": true,
   "source": "https://omnirun.io/llms-full.txt",
   "quote": "Preview URLs: Expose any sandbox port as a public HTTPS URL instantly.",
   "note": null,
   "checked": "2026-09-30"
  },
  "static_egress_ip": {
   "value": false,
   "source": "https://omnirun.io/security",
   "quote": "Separate networks. Each VM gets its own network namespace, tap device and bridge, and traffic between sandboxes is blocked.",
   "note": "No fixed/dedicated outbound IP feature is documented anywhere (pricing, docs, compare, security); egress goes out through the shared host's network.",
   "checked": "2026-09-30"
  },
  "gpu": {
   "value": false,
   "source": "https://omnirun.io/compare",
   "quote": "GPU ... No Firecracker has no GPU passthrough",
   "note": null,
   "checked": "2026-09-30"
  },
  "windows": {
   "value": false,
   "source": "https://omnirun.io/open-source",
   "quote": "Self-host: x86_64 Linux host with KVM, 8 GB RAM, 30 GB free disk (Ubuntu 24.04 tested)",
   "note": "not offered: outside the product's scope. All templates are Linux (XFCE desktop, Python/Node/Rust/PHP toolchains); no Windows machine option is offered.",
   "checked": "2026-09-30"
  },
  "macos": {
   "value": false,
   "source": "https://omnirun.io/open-source",
   "quote": "Self-host: x86_64 Linux host with KVM, 8 GB RAM, 30 GB free disk (Ubuntu 24.04 tested)",
   "note": "not offered: outside the product's scope. Firecracker microVMs run Linux guest kernels on a Linux/KVM host; no macOS option exists.",
   "checked": "2026-09-30"
  },
  "arm64": {
   "value": false,
   "source": "https://omnirun.io/open-source",
   "quote": "Self-host: x86_64 Linux host with KVM, 8 GB RAM, 30 GB free disk (Ubuntu 24.04 tested)",
   "note": "Self-host requirements and the managed service are described only for x86_64 hosts; no ARM64 host or sandbox option is documented.",
   "checked": "2026-09-30"
  },
  "open_source": {
   "value": false,
   "was": true,
   "source": "https://omnirun.io/open-source",
   "quote": "Source opens soon: Apache-2.0, public shortly.",
   "note": "Announced as Apache-2.0 but the server source is not public yet. The linked org https://github.com/a14a-org has only omnirun-sdk, omnirun-cli, omnirun-examples and framework adapters (MIT) and an AGPL-3.0 Claude Managed Agents worker; no sandbox server repository (GitHub API, checked 2026-10-14). Self-host uses a downloaded omnictl installer. Flip to true once the repository is published.",
   "checked": "2026-10-14"
  },
  "soc2": {
   "value": false,
   "source": "https://omnirun.io/security",
   "quote": "No compliance certifications. OmniRun has no SOC 2, ISO 27001 or HIPAA attestation.",
   "note": null,
   "checked": "2026-09-30"
  },
  "hipaa": {
   "value": false,
   "source": "https://omnirun.io/solutions/claude-managed-agents",
   "quote": "covers Anthropic's processing only; OmniRun itself holds no HIPAA or SOC 2 attestation.",
   "note": "Claude Managed Agents can be eligible for Anthropic's own HIPAA-BAA program (configured Anthropic-side), but OmniRun itself has no HIPAA attestation/BAA.",
   "checked": "2026-09-30"
  },
  "docker_inside": {
   "value": true,
   "source": "https://omnirun.io/security",
   "quote": "Your code Untrusted: runs as root in its own VM by default ... Guest kernel A Linux kernel per sandbox, never the host's",
   "note": "derived: not explicitly documented either way. Each sandbox is a full Firecracker microVM with its own dedicated Linux guest kernel (not a shared-kernel container) and guest commands run as root by default, which is exactly the environment Docker needs (cgroups/namespaces inside a real kernel); nested_virt (/dev/kvm passthrough) is false, but Docker itself does not require nested hardware virtualization to run. No page confirms or denies a Docker daemon actually starting inside the guest.",
   "checked": "2026-09-30"
  },
  "usage_api": {
   "value": false,
   "source": "https://omnirun.io/llms-full.txt",
   "quote": "Optional gateway. A single node runs with an admin API key; add the gateway for per-user quotas, metering and more than one node.",
   "note": "granularity: account-only; cost: no; OmniRun has internal metering through the gateway component for tracking per-user sandbox usage, but no public REST API, SDK call, or CLI command is documented for retrieving billable usage per sandbox or VM. The /llm/v1/usage endpoint is only for the LLM proxy (OpenAI-compatible) usage, not sandbox metering. Usage tracking appears to be configuration-level only (metering-only by default) and not exposed programmatically.",
   "confidence": "medium",
   "checked": "2026-10-01"
  },
  "sso": {
   "value": null,
   "was": true,
   "source": "https://omnirun.io/security",
   "quote": null,
   "note": "No SSO/SAML/OIDC mention on pricing (managed), security, open-source, compare, docs or llms-full.txt. Sign-in is magic-link email (\"auth_mode = \\\"hybrid\\\" with a Resend key\", llms-full.txt) with optional TOTP; team accounts, API tokens and per-user quotas exist but are not SSO. Unverified, so null.",
   "checked": "2026-10-14"
  },
  "auto_stop_idle": {
   "value": true,
   "source": "https://omnirun.io/docs/sandboxes",
   "quote": "Sandboxes with no activity for 15 minutes are automatically killed. Sandboxes created with vaultInject: true are exempt from idle auto-kill.",
   "note": "Idle auto-kill destroys the sandbox (disk deleted), it is not a resumable stop. Separately, timeout (default 300 s, \"Max lifetime in seconds before auto-kill\", llms-full.txt) caps lifetime; no maximum timeout is published, so max_session_h stays null.",
   "checked": "2026-10-14"
  },
  "spend_limits": {
   "value": true,
   "source": "https://omnirun.io/pricing",
   "quote": "Accounts for everyone on your team, API tokens, per-user quotas, preview URLs for ports and an audit log of API calls.",
   "note": "The old EUR 50/300 default plan spend caps went with the plans. Usage caps now come from agreed per-user sandbox-hour quotas (dashboard example \"412.6 h of 600 h agreed quota\"); the LLM proxy also has a default EUR 5 per-account spend cap returning 402 (llms-full.txt).",
   "checked": "2026-10-14"
  }
 },
 "locations": [
  {
   "country": "FI",
   "state": null,
   "city": null,
   "provider_region": "eu-fi-1",
   "self_serve": true,
   "choosable": false
  }
 ],
 "locations_source": "https://omnirun.io/pricing",
 "locations_quote": "All hosts in Finland. Managed service hosted in the EU (Finland).",
 "locations_checked": "2026-10-14",
 "no_price_reason": "No public price: managed OmniRun is priced per client by agreement (omnirun.io/pricing)",
 "locations_note": "Security page: \"The managed service runs in Hetzner data centers in Finland (EU).\" llms-full.txt still says \"Hetzner data centers in Germany (EU)\" (stale); Finland kept."
}