{
 "features_resolved": {
  "snapshot_any": true,
  "snapshot_mem": true,
  "fork": true,
  "pause_resume": true,
  "persistent_disk": true,
  "whole_disk": true,
  "persist_scope": null,
  "volumes": true,
  "auto_stop_idle": true,
  "long_sessions": true,
  "custom_image": true,
  "image_snapshot": true,
  "image_oci": true,
  "vm_isolation": true,
  "docker_inside": true,
  "nested_virt": false,
  "root": true,
  "systemd": null,
  "browser": true,
  "desktop": true,
  "computer_use": true,
  "code_interpreter": true,
  "browser_control": null,
  "desktop_control": null,
  "browser_and_desktop": true,
  "anti_bot": false,
  "captcha_solving": false,
  "residential_ip": false,
  "agent_harnesses": true,
  "ssh": true,
  "public_ipv4": true,
  "inbound_https": true,
  "custom_domain": true,
  "raw_tcp_inbound": true,
  "egress_allowlist": true,
  "open_internet": true,
  "static_egress_ip": true,
  "private_network": true,
  "self_host": false,
  "byoc": false,
  "open_source": false,
  "soc2": false,
  "hipaa": false,
  "sso": true,
  "gpu": false,
  "arm64": false,
  "windows": false,
  "macos": false,
  "lang_python": true,
  "lang_node": true,
  "lang_go": null,
  "lang_rust": null,
  "lang_java": null,
  "gpu_desktop": null,
  "credential_injection": null,
  "egress_http_rules": false,
  "wake_on_request": true,
  "live_resize": false,
  "fork_running": false,
  "memory_snapshot_fork": true,
  "webhooks": true,
  "scheduled_wakeups": null,
  "audit_logs": true,
  "eu_data_residency": false,
  "zero_data_retention": null,
  "scoped_api_keys": true,
  "spend_limits": true,
  "mcp_server": true,
  "usage_api": true,
  "snapshot_auto": true,
  "snapshot_on_demand": true,
  "harness_api": true,
  "own_agent_api": false,
  "fast_boot": null,
  "strong_isolation": true,
  "ingress_rules": true,
  "guest_firewall": true,
  "secret_proxy": true,
  "secret_proxy_any": true,
  "volume_attach": true,
  "volume_shared": true,
  "sidecar": null,
  "fuse": true,
  "kernel_features": true,
  "burst": null
 },
 "company": {
  "id": "withruntime",
  "checked": "2026-09-30",
  "company": "Runtime LLC (withruntime.com)",
  "ownership": {
   "value": "independent",
   "parent": null,
   "source": "https://withruntime.com/about",
   "quote": "Runtime is a cloud built for AI agents. Its first product is sandboxes: Linux microVMs with their own kernel, which an agent creates, drives and stops by API, CLI, MCP or SDK."
  },
  "stage": {
   "value": "unknown",
   "source": "",
   "quote": "",
   "confidence": "low",
   "note": "No press releases, funding announcements, team/about/careers pages (all 404), Crunchbase profile, or accelerator mention were found for withruntime.com / Runtime LLC. The site's own schema.org data lists the legal name as 'Runtime LLC' with no investor or founder information."
  },
  "accelerators": [],
  "total_funding_usd": {
   "value": null,
   "status": "unknown"
  },
  "last_round": {
   "type": null,
   "amount_usd": null,
   "date": null,
   "leads": [],
   "status": "unknown",
   "source": "",
   "quote": ""
  },
  "investors": [],
  "portfolio_listings": [],
  "revenue": {
   "value": null,
   "status": "unknown"
  },
  "employees": {
   "value": null,
   "source": ""
  },
  "note": "The YC directory lists a company named 'Runtime' (batch Spring 2026, https://www.ycombinator.com/companies/runtime) described as 'AI agents for financial operations' — this is a different company from withruntime.com, which is a Firecracker-microVM sandbox/VM cloud for AI agents (per its own /about page: 'Runtime is a cloud built for AI agents. Its first product is sandboxes...'). The two are unrelated despite sharing the name 'Runtime'. withruntime.com's legal entity is 'Runtime LLC' (per its own schema.org markup); its site is very new (pricing/storage changes dated September 2026), has no team/press/careers/blog pages (all return 404), and no funding, investor, or accelerator information could be found via web search, Crunchbase-style queries, or HN. Treat funding stage and backers as unknown rather than assumed bootstrapped or VC-backed."
 },
 "id": "withruntime",
 "name": "Runtime (withruntime.com)",
 "url": "https://withruntime.com/pricing",
 "category": "agent-sandbox",
 "isolation": "firecracker",
 "modes": [
  {
   "key": "active-only",
   "label": "Active CPU plus reserved RAM",
   "flags": [],
   "os": [
    "linux"
   ],
   "regions": null,
   "gpu_only": false,
   "features": {
    "isolation": "firecracker"
   },
   "pricing": "resource",
   "vcpu_h": 0.025,
   "ram_gib_h": 0.0075,
   "cpu_basis": "active",
   "ram_basis": "alloc",
   "active_floor": 0,
   "ram_per_vcpu": [
    null,
    null
   ],
   "ram_fixed_per_vcpu": null,
   "vcpu_options": null,
   "min_vcpu": null,
   "max_vcpu": 16,
   "max_ram_gib": 64,
   "sizes": null,
   "pool_tiers": null,
   "requires_always_on": false,
   "always_on_month_per_instance": null,
   "commit_note": null,
   "min_billed_seconds": 0,
   "granularity_s": null,
   "start_fee": 0,
   "boot_overhead_s": null,
   "multiplier": 1,
   "windows_vcpu_h": null,
   "gpu": null,
   "note": "Engine cannot encode absolute 0.05-vCPU floor for all sizes. Formula max(0.05, vCPU×util)×0.025 + RAM×0.0075; below floor engine undercounts up to $0.00125/sandbox-hour."
  },
  {
   "key": "reserved-cpu",
   "label": "Reserved CPU",
   "flags": [],
   "os": [
    "linux"
   ],
   "regions": null,
   "gpu_only": false,
   "features": {
    "isolation": "firecracker"
   },
   "pricing": "resource",
   "vcpu_h": 0.025,
   "ram_gib_h": 0.0075,
   "cpu_basis": "alloc",
   "ram_basis": "alloc",
   "active_floor": 0,
   "ram_per_vcpu": [
    null,
    null
   ],
   "ram_fixed_per_vcpu": null,
   "vcpu_options": null,
   "min_vcpu": null,
   "max_vcpu": 16,
   "max_ram_gib": 64,
   "sizes": null,
   "pool_tiers": null,
   "requires_always_on": false,
   "always_on_month_per_instance": null,
   "commit_note": null,
   "min_billed_seconds": 0,
   "granularity_s": null,
   "start_fee": 0,
   "boot_overhead_s": null,
   "multiplier": 1,
   "windows_vcpu_h": null,
   "gpu": null,
   "note": "Reserved CPU bills all provisioned cores; same unit rate."
  }
 ],
 "storage": {
  "included_disk_gib": 10,
  "disk_gib_month": 0.08589934592,
  "disk_billed_when_stopped": true,
  "snapshot_gib_month": 0.08589934592,
  "paused_ram_billed": false,
  "volume_gib_month": 0.11169,
  "volume_backup_gb_month": 0.02
 },
 "network": {
  "egress_free_gib": 100,
  "egress_gib": 0.02147483648,
  "ipv4_month": 5,
  "ipv4_available": true,
  "internet": {
   "default": "full"
  }
 },
 "plans": [
  {
   "name": "Prepaid paid account",
   "fee": 0,
   "flags": [],
   "fee_is_credit": false,
   "included_usd": 0,
   "per_seat": 0,
   "concurrency": 100,
   "max_session_h": null,
   "max_vcpu": null,
   "max_ram_gib": null,
   "sizes_allowed": null,
   "note": "Full paid limits from the first top-up: 100 sandboxes at once (200 with auto top-up), 200 vCPU / 400 GiB memory / 400 GiB disk across running sandboxes (twice that with auto top-up). 50 at once only after a disputed payment, suspension or abuse report."
  }
 ],
 "free": {
  "monthly_credit": null,
  "one_time_credit": null,
  "trial_hours": 100,
  "conditions": "Free usage: 100 GiB-hours of memory and 25 vCPU-hours of active CPU (\"100 free hours of a 1 GB machine\"), once across the first 30 days, then every month (renewed on the 1st, UTC) once the account has paid; also 10 GB of saved copies and 5 GB of volumes. Without credit: 4 sandboxes at once, 2 vCPU/4 GiB/10 GiB disk each, 8 vCPU / 16 GiB across running sandboxes, 10 sandboxes kept, 50 created per 24 h; no card."
 },
 "features": {
  "linux": true,
  "windows": false,
  "macos": false,
  "arm64": false,
  "gpu": false,
  "snapshot": "mem",
  "pause_resume": true,
  "fork": true,
  "persistent_disk": true,
  "volumes": true,
  "auto_stop_idle": true,
  "max_session_h": null,
  "custom_image": true,
  "docker_inside": true,
  "nested_virt": false,
  "root": true,
  "systemd": null,
  "browser": true,
  "desktop": true,
  "computer_use": true,
  "code_interpreter": true,
  "agent_harnesses": true,
  "ssh": true,
  "public_ipv4": true,
  "inbound_https": true,
  "custom_domain": true,
  "raw_tcp_inbound": true,
  "egress_allowlist": true,
  "static_egress_ip": true,
  "private_network": true,
  "self_host": false,
  "byoc": false,
  "open_source": false,
  "soc2": false,
  "hipaa": false,
  "sso": true,
  "gpu_types": [],
  "regions": [
   "us"
  ],
  "lang_python": true,
  "lang_node": true,
  "lang_go": null,
  "lang_rust": null,
  "lang_java": null,
  "gpu_desktop": null,
  "credential_injection": null,
  "egress_http_rules": false,
  "wake_on_request": true,
  "live_resize": false,
  "fork_running": false,
  "memory_snapshot_fork": true,
  "webhooks": true,
  "scheduled_wakeups": null,
  "audit_logs": true,
  "eu_data_residency": false,
  "zero_data_retention": null,
  "scoped_api_keys": true,
  "spend_limits": true,
  "mcp_server": true,
  "isolation": "firecracker",
  "image_oci": true,
  "snapshot_auto": true,
  "snapshot_on_demand": true,
  "harness_api": true,
  "egress_allowlist_level": "both",
  "ingress_rules": true,
  "guest_firewall": true,
  "secret_proxy": "any-http",
  "volume_attach": true,
  "volume_shared": true,
  "anti_bot": false,
  "captcha_solving": false,
  "egress_ip_type": "static-datacenter",
  "own_agent_api": false,
  "max_session_unlimited": true,
  "open_internet": true,
  "usage_api": true
 },
 "perf": {
  "cpu_runs_s": null,
  "cold_start_ms": null,
  "burst_tti_ms": null,
  "dax_s": null
 },
 "knobs": [],
 "caveats": [
  "Public list pricing. Active CPU has absolute 0.05-vCPU floor per sandbox, not a fixed utilization percentage. Memory is reserved, not utilization. Decimal GB is explicit for snapshots and egress; rates converted to GiB with 1.073741824.",
  "Features set to null were not verified. No sandbox was purchased or tested; feature/performance statements are documentation claims. Null maximums are unknown unless a cited note explicitly states unlimited.",
  "A complete monthly bill requires known snapshot/egress/plan limits; do not silently treat missing ancillary charges as free.",
  "Disk: a running sandbox's first 10 GiB is included; past it, the blocks its disk alone holds are billed at the paused-storage rate, $0.08 per decimal GB per 30-day month, measured every 30 s (llms-full.txt, 2026-10-14; sandboxes made before 5 October 2026 keep their old terms). The engine bills provisioned disk past 10 GiB, so it overcounts a disk that is mostly empty. A stopped sandbox keeps its disk \"billed as paused storage\"; the engine still subtracts the 10 GiB there, a small undercount. persistent: true no longer has its own disk rate (\"its disk is billed as any sandbox's\"). Largest disk is 400 GiB with credit, 10 GiB without.",
  "Desktop: \"Start a Linux desktop in any sandbox and drive it with clicks, keys and screenshots, or watch it live\"; first start installs it (~90 s, ~1 GB disk) and a browser follows (~1 min, ~0.5 GB). Desktop recordings to MP4 are supported.",
  "Default idle pause is 60 seconds (configurable 10–86,400 or disabled). Compute stops at pause; the saved disk+memory blocks then cost $0.08/decimal-GB-month. Paid retention defaults 30 days and is configurable 1–365; trial retention is 7 days. Resize (memoryMiB) is possible only while paused.",
  "Free usage is a resource bucket (100 GiB-hours of memory + 25 vCPU-hours of active CPU, ~$1.38 at list rates), not a USD credit, so the card's free-dollar fields cannot represent it. It is once in the first 30 days, then monthly once the account has paid; the monthly renewal is not modelled.",
  "Paid network cap is 500 GiB/day in+out per sandbox. Trial has 5 GiB/day total in+out. Egress billing itself is account-wide: first 100 GiB/month free, then $0.02 per decimal GB.",
  "Storage charging began 2026-09-23. The first 3 images and first 10 GiB of volumes made under the trial remain free even after adding credit; snapshots are excluded.",
  "Volume backup is $0.02 per decimal GB-month (\"Volume backup | $0.02 per decimal GB per 30-day month; one made before this price keeps $0.012 until 7 November 2026\", pricing.md 2026-10-14); the card uses the new $0.02.",
  "Agent harnesses: the AI SDK harness adapter was verified only against a fake Runtime API; Runtime's own page says \"No bridge harness (Claude Code, Codex) has run on Runtime yet.\""
 ],
 "sources": [
  "https://withruntime.com/pricing",
  "https://withruntime.com/llms-full.txt",
  "https://withruntime.com/pricing.md",
  "https://withruntime.com/docs/limits.md",
  "https://withruntime.com/llms.txt",
  "https://withruntime.com/docs/sandbox-environment.md"
 ],
 "fleet": {
  "default_max_instances": 4,
  "default_max_vcpu": 200,
  "default_max_gpus": null,
  "raise": "ticket",
  "raise_time_days": null,
  "verification": "Trial no card; paid prepaid card top-up $10-$10,000. Full paid limits apply from the first top-up; auto top-up doubles them.",
  "tiers": "Without credit 4 at once, max 2 vCPU/4 GiB/10 GiB each, 8 vCPU/16 GiB total; paid from the first top-up 100 at once, 200 vCPU/400 GiB memory/400 GiB disk across running sandboxes; with auto top-up 200 at once and twice the vCPU/memory/disk. Disputed payment, suspension or abuse report: 50 at once.",
  "notes": "Past the limits: write to support@withruntime.com with the numbers; \"usually the same day\" (raise_time_days left null). Auto top-up doubles the limits self-serve. At 4 vCPU/8 GiB the 200-vCPU pool limits a paid fleet to 50 even though the count allows 100; 300 or 1,000 at once needs support.",
  "sources": [
   "https://withruntime.com/pricing.md",
   "https://withruntime.com/docs/limits.md"
  ],
  "researched": "2026-10-14"
 },
 "audit_2026_09_29": {
  "applied": 22,
  "source": "checked against the provider's live pricing and docs pages",
  "reviewed": 2
 },
 "feature_evidence": {
  "snapshot_auto": {
   "value": true,
   "source": "https://withruntime.com/llms.txt",
   "quote": "A sandbox pauses itself after 60 seconds with nothing happening in it and bills only paused storage ($0.08 per decimal GB per 30-day month) until the next request wakes it, with its memory and processes intact.",
   "note": "Trigger: idle pause (idlePauseSeconds 10-86,400, default 60, 0 = never); wakes on next exec/file call/preview visit/TCP connection. Memory + processes + files included; kept 30 days by default on paid (1-365), 7 on trial. Also AI-SDK harness pauseOnStop. Volumes get daily off-server backups (not this feature).",
   "checked": "2026-09-29"
  },
  "snapshot_on_demand": {
   "value": true,
   "source": "https://withruntime.com/docs/javascript.md",
   "quote": "A fork is a copy of a sandbox as it is now: its files, its memory and its running processes, as a new sandbox of its own.",
   "note": "sbx.snapshot({name, retentionDays}) then sandboxes.create({snapshot}) boots new machines from it; fork gives 1-10 running copies with memory. Snapshots copied off-server encrypted. Limitation: 'a sandbox with volumes cannot be snapshotted'.",
   "checked": "2026-09-29"
  },
  "harness_api": {
   "value": true,
   "source": "https://withruntime.com/docs/vercel-ai-sdk.md",
   "quote": "Run an AI SDK harness agent (Claude Code, Codex, OpenCode, Pi and the rest) in a Runtime sandbox, or give any AI SDK model call four sandbox tools.",
   "note": "First-party adapter only: withruntime/ai-harness createRuntimeSandbox() is a sandbox provider for Vercel's AI SDK HarnessAgent (sessions, prompts, resume via pauseOnStop); the harness-driving API itself is Vercel's AI SDK, not a native Runtime endpoint. Harnesses: Claude Code, Codex, OpenCode, Deep Agents (bridge over WebSocket preview port), Pi. No native Runtime agent-run API found. Caveat: the adapter was verified against a fake of the Runtime API; the page says \"No bridge harness (Claude Code, Codex) has run on Runtime yet.\" (llms-full.txt, Vercel AI SDK page).",
   "checked": "2026-10-14"
  },
  "egress_allowlist": {
   "value": true,
   "source": "https://withruntime.com/docs/sandbox-environment.md",
   "quote": "`allow` narrows the sandbox to a list, on every port it may use: domains, `*.domain` for every name under one, addresses or CIDR ranges.",
   "note": "Per sandbox: internet:false, allow list, deny list (deny always wins), connect host:port pairs; set at create or live ('applied at once, to open connections too'). Enforced by host proxy: 'The rules apply to root inside the sandbox too.' Sandbox has no NIC. Optional account-wide customer upstream proxy.",
   "checked": "2026-09-29",
   "level": "both"
  },
  "egress_http_rules": {
   "value": false,
   "source": "https://withruntime.com/docs/sandbox-environment.md",
   "quote": "`deny` always wins.",
   "note": "Network rules are only internet on/off, allow/deny (domains, wildcards, IPs/CIDRs) and connect host:port. Method/path rules exist only to scope secret injection ('With `rules`, on paid accounts, the value goes only into the requests a rule allows, by method and path'), they do not block traffic. Could route through your own upstream proxy for HTTP rules.",
   "checked": "2026-09-29"
  },
  "ingress_rules": {
   "value": true,
   "source": "https://withruntime.com/docs/security.md",
   "quote": "Inbound connections require a preview, a proved custom domain, an allocated TCP port or an authorized private tunnel. Each reaches only the sandbox port and account it was granted. A preview is private with an expiring token unless you make it public, which a paid sandbox can do; a trial sandbox's previews are always private.",
   "note": "Per-port previews with rotatable tokens on runtimehost.com, WireGuard private network, public TCP ports (open to anyone), custom domains. No IP allowlist for inbound found.",
   "checked": "2026-09-29"
  },
  "guest_firewall": {
   "value": true,
   "source": "https://withruntime.com/docs/sandbox-environment.md",
   "quote": "`sudo`, `adduser` and `useradd`, `chronyd`, `sshd` (for [SSH and editors](./editors)), `ip`, `iptables-legacy`",
   "note": "Firecracker microVM with own kernel and passwordless sudo; iptables-legacy preinstalled. Caveat: 'A sandbox has no network card' - outbound goes to a host proxy, so guest rules act on the proxy path/Docker bridge.",
   "checked": "2026-09-29",
   "derived": true
  },
  "secret_proxy": {
   "value": "any-http",
   "source": "https://withruntime.com/docs/security.md",
   "quote": "The host's proxy replaces the placeholder with the value in the URL and headers of HTTPS requests to the secret's hosts, and nowhere else.",
   "note": "Account secrets bound to up to 16 hosts, placeholder env var (rtsec_...) or forced header; optional method/path rules; S3 SigV4 re-signing (used for bucket mounts). HTTPS only: 'Plain HTTP never carries a secret, and request bodies are never rewritten.' No DB/SSH/git-SSH credential injection; OIDC identity tokens for AWS/GCP as keyless alternative.",
   "checked": "2026-09-29"
  },
  "volume_attach": {
   "value": true,
   "source": "https://withruntime.com/docs/javascript.md",
   "quote": "A volume is a disk that outlives sandboxes. Attach it read-write to one sandbox at a time, or as a read-only `snapshot` copy to any number.",
   "note": "Fixed-size volume on one server (sandbox placed on that server), daily off-server backups (7-day default retention, 1-365). Volumes block snapshots of that sandbox.",
   "checked": "2026-09-29"
  },
  "volume_shared": {
   "value": true,
   "source": "https://withruntime.com/docs/javascript.md",
   "quote": "Attach it read-write to one sandbox at a time, or as a read-only `snapshot` copy to any number.",
   "note": "Volumes: read-only sharing only (read-write single attach). Read-write sharing possible via first-party bucket mounts of your own S3/R2/GCS (rclone): 'Two sandboxes can mount the same bucket; a file two of them write is the last one closed.'",
   "checked": "2026-09-29"
  },
  "nested_virt": {
   "value": false,
   "source": "https://withruntime.com/glossary/kvm.md",
   "quote": "Runtime operates the servers, the KVM hosts and the Firecracker processes, so you never grant anyone access to `/dev/kvm` or pick a kernel.",
   "note": "Runtime itself uses KVM on the host to run Firecracker microVMs, but no page documents passing /dev/kvm or hardware virtualization through into the guest sandbox; Firecracker microVMs do not expose nested virtualization to guests by default. Derived, not explicitly stated as unavailable.",
   "checked": "2026-09-30"
  },
  "anti_bot": {
   "value": false,
   "source": "https://withruntime.com/docs/pricing",
   "quote": "Run coding agents, browser tasks and code in Firecracker microVMs: exec commands, a filesystem, a real browser and desktop, snapshots and forks.",
   "note": "not offered: outside the product's scope. Runtime is a general-purpose sandbox/VM and browser/desktop product; no stealth, fingerprint-evasion, or anti-bot-detection feature is documented anywhere in its docs or llms-full.txt.",
   "checked": "2026-09-30"
  },
  "captcha_solving": {
   "value": false,
   "source": "https://withruntime.com/docs/pricing",
   "quote": "Run coding agents, browser tasks and code in Firecracker microVMs: exec commands, a filesystem, a real browser and desktop, snapshots and forks.",
   "note": "not offered: outside the product's scope. No CAPTCHA-solving capability is mentioned in Runtime's docs, network, or browser/desktop pages.",
   "checked": "2026-09-30"
  },
  "egress_ip_type": {
   "value": "static-datacenter",
   "source": "https://withruntime.com/llms-full.txt",
   "quote": "Dedicated addresses | A dedicated outbound IPv4 address, with IPv6; paid accounts | Available",
   "note": "Sandboxes egress through the provider's own datacenter (Virginia, US) host proxy; paid accounts can reserve a dedicated/static outbound IPv4 or IPv6 address (`POST /v1/addresses`). No residential or mobile IP option is offered.",
   "checked": "2026-09-30"
  },
  "fork_running": {
   "value": false,
   "source": "https://withruntime.com/llms-full.txt",
   "quote": "A fork or snapshot pauses a running sandbox for the moment it takes, then wakes it.",
   "note": "Fork copies a running sandbox's memory and processes into up to 10 new running copies, but the source sandbox is briefly paused (not left running) while the fork snapshot is taken, so it does not meet 'clone a RUNNING machine without stopping it' precisely; memory_snapshot_fork is true.",
   "checked": "2026-09-30"
  },
  "agent_harnesses": {
   "value": true,
   "source": "https://withruntime.com/docs/vercel-ai-sdk.md",
   "quote": "Run an AI SDK harness agent (Claude Code, Codex, OpenCode, Pi and the rest) in a Runtime sandbox, or give any AI SDK model call four sandbox tools.",
   "note": "Also ready MCP configs/plugins for Claude Code, Codex, Cursor, Windsurf, VS Code and Gemini CLI documented in llms-full.txt. Caveat: the adapter was verified against a fake of the Runtime API; the page says \"No bridge harness (Claude Code, Codex) has run on Runtime yet.\" (llms-full.txt, Vercel AI SDK page).",
   "checked": "2026-10-14"
  },
  "own_agent_api": {
   "value": false,
   "source": "https://withruntime.com/docs/pricing",
   "quote": "Run coding agents, browser tasks and code in Firecracker microVMs: exec commands, a filesystem, a real browser and desktop, snapshots and forks.",
   "note": "not offered: outside the product's scope. Runtime provides sandbox infrastructure (compute, browser, desktop, MCP) for third-party/customer agents and harnesses; it has no first-party task/browser/research agent of its own that it drives via an API.",
   "checked": "2026-09-30"
  },
  "lang_python": {
   "value": true,
   "source": "https://withruntime.com/llms-full.txt",
   "quote": "Every sandbox is a Firecracker microVM with its own Linux kernel and disk, with Python, Node.js, Bun, git and a compiler ready to use.",
   "note": "Also a code interpreter running Python (and other languages), and a Python SDK.",
   "checked": "2026-09-30"
  },
  "lang_node": {
   "value": true,
   "source": "https://withruntime.com/llms-full.txt",
   "quote": "JavaScript | Node.js 24.21.0 (`node`, `npm`, `npx`); Bun 1.4.0 (`bun`)",
   "note": "Node.js and Bun preinstalled by default; first-party JavaScript/TypeScript SDK.",
   "checked": "2026-09-30"
  },
  "gpu": {
   "value": false,
   "source": "https://withruntime.com/llms-full.txt",
   "quote": "GPUs. Modal sandboxes can use GPUs. Runtime runs on CPUs.",
   "note": "Confirmed directly by Runtime's own comparison docs; also 'Daytona offers GPU sandboxes and Windows machines. Runtime runs Linux on CPUs.'",
   "checked": "2026-09-30"
  },
  "windows": {
   "value": false,
   "source": "https://withruntime.com/llms-full.txt",
   "quote": "GPUs and Windows. Daytona offers GPU sandboxes and Windows machines. Runtime runs Linux on CPUs.",
   "note": "not offered: outside the product's scope. Runtime sandboxes are Linux-only Firecracker microVMs.",
   "checked": "2026-09-30"
  },
  "macos": {
   "value": false,
   "source": "https://withruntime.com/llms-full.txt",
   "quote": "Runtime runs Linux on CPUs.",
   "note": "not offered: outside the product's scope. No macOS machine option is documented; every sandbox is a Linux Firecracker microVM.",
   "checked": "2026-09-30"
  },
  "arm64": {
   "value": false,
   "source": "https://withruntime.com/llms-full.txt",
   "quote": "Runtime runs Linux on CPUs.",
   "note": "not offered: outside the product's scope. No ARM/aarch64 machine option is documented anywhere in pricing or docs; Firecracker/KVM setup described (Intel VT/AMD-V) implies x86.",
   "checked": "2026-09-30"
  },
  "self_host": {
   "value": false,
   "source": "https://withruntime.com/compare/self-hosted-vs-managed-sandbox.md",
   "quote": "Self-hosting means running KVM hosts, a VM monitor, networking, egress control and abuse handling yourself; a managed sandbox is one call. On Runtime the whole stack is already running... at $0.025 per vCPU-hour",
   "note": "Runtime is explicitly positioned as the managed alternative to self-hosting Firecracker/gVisor/Kata yourself; no self-hosted Runtime distribution exists.",
   "checked": "2026-09-30"
  },
  "byoc": {
   "value": false,
   "source": "https://withruntime.com/compare/self-hosted-vs-managed-sandbox.md",
   "quote": "Isolation | A Firecracker microVM with its own Linux kernel and disk, on dedicated servers Runtime operates",
   "note": "not offered: outside the product's scope. Runtime runs on servers it operates itself (one US region, Virginia); no option to deploy the managed service into a customer's own cloud account is documented.",
   "checked": "2026-09-30"
  },
  "open_source": {
   "value": false,
   "source": "https://withruntime.com/compare/self-hosted-vs-managed-sandbox.md",
   "quote": "The open-source parts exist: Firecracker, gVisor and Kata Containers. What they leave to you is everything around the virtual machine.",
   "note": "Runtime's product itself (the API, host proxy, billing, orchestration) is closed-source and only offered as a managed service; only the underlying VMM (Firecracker) is open source, not Runtime's product.",
   "checked": "2026-09-30"
  },
  "soc2": {
   "value": false,
   "source": "https://withruntime.com/docs/security.md",
   "quote": "Sandboxes, their disks and memory | Data center, Virginia | SOC 1, SOC 2 and SOC 3 Type 2; ISO 27001",
   "note": "Runtime's security page lists SOC 2 certifications only for its infrastructure subprocessors (data center, Neon, Vercel, Backblaze, Stripe, Cloudflare/Resend); it does not state that Runtime itself holds a SOC 2 attestation.",
   "checked": "2026-09-30"
  },
  "hipaa": {
   "value": false,
   "source": "https://withruntime.com/docs/security.md",
   "quote": "For a questionnaire, a data processing agreement or anything this page does not answer, write to security@withruntime.com.",
   "note": "No mention of HIPAA eligibility or a BAA anywhere on the security or legal pages; only a general DPA is offered.",
   "checked": "2026-09-30"
  },
  "eu_data_residency": {
   "value": false,
   "source": "https://withruntime.com/llms-full.txt",
   "quote": "Regions. Daytona runs in the US and the EU. Runtime runs in one US region.",
   "note": "Also: 'Everything runs in one region, in Virginia, United States' (docs/security.md). No EU region is offered.",
   "checked": "2026-09-30"
  },
  "max_session_h": {
   "value": "none",
   "source": "https://withruntime.com/llms-full.txt",
   "quote": "Running for longer than a lease. `persistent: true`, at create or with `:update`, renews the lease on the server while the account has credit, up to... A Runtime sandbox runs as long as you extend its lease, or stays up with `persistent: true`",
   "note": "A single lease is capped at 1 hour (`timeoutSeconds` max 3600, extend up to an hour ahead) but leases can be extended indefinitely, and `persistent: true` auto-renews the lease server-side while credit lasts, so there is no hard ceiling on total session length like a VM you keep paying for.",
   "checked": "2026-09-30"
  },
  "live_resize": {
   "value": false,
   "source": "https://withruntime.com/docs/sandbox-environment.md",
   "quote": "resize this one while it is paused (POST /v1/sandboxes/{id}:resize with memoryMiB)",
   "note": "Memory can be changed only while the sandbox is paused, not while it runs, so live resize stays false. The :update endpoint still has no vcpu/memory field.",
   "checked": "2026-10-14"
  },
  "usage_api": {
   "value": true,
   "source": "https://withruntime.com/llms-full.txt",
   "quote": "GET /v1/usage says what the account has and has used... resources | The newest hundred resources, with what each used and was charged. Each resource carries resourceId, name, kind, state, createdAt, vcpu and memoryMiB, runningSeconds (the billed running time), activeCpuSeconds, memoryGiBSeconds, rat",
   "note": "granularity: per-sandbox; cost: yes; The REST API endpoint GET /v1/usage returns a resources array with per-sandbox charges (chargedMicros in integer microdollars). Each resource is identified by resourceId and includes billable metrics: runningSeconds, activeCpuSeconds, memoryGiBSeconds, and total chargedMicros. Supported via SDK (JavaScript, Python, Go, Ruby, Java), CLI (runtime usage), and REST API.",
   "confidence": "high",
   "checked": "2026-10-01"
  }
 },
 "locations": [
  {
   "country": "US",
   "state": "VA",
   "city": "Ashburn",
   "provider_region": "us-east-1",
   "self_serve": true,
   "choosable": false
  }
 ],
 "locations_source": "https://withruntime.com/docs/security.md",
 "locations_quote": "Everything runs in one region, in Virginia, United States",
 "locations_checked": "2026-10-01"
}