{
 "features_resolved": {
  "snapshot_any": false,
  "snapshot_mem": false,
  "fork": false,
  "pause_resume": false,
  "persistent_disk": false,
  "whole_disk": false,
  "persist_scope": null,
  "volumes": false,
  "auto_stop_idle": false,
  "long_sessions": false,
  "custom_image": false,
  "image_snapshot": false,
  "image_oci": false,
  "vm_isolation": true,
  "docker_inside": false,
  "nested_virt": false,
  "root": null,
  "systemd": null,
  "browser": false,
  "desktop": false,
  "computer_use": false,
  "code_interpreter": true,
  "browser_control": null,
  "desktop_control": null,
  "browser_and_desktop": false,
  "anti_bot": false,
  "captcha_solving": false,
  "residential_ip": false,
  "agent_harnesses": false,
  "ssh": false,
  "public_ipv4": false,
  "inbound_https": true,
  "custom_domain": null,
  "raw_tcp_inbound": null,
  "egress_allowlist": false,
  "open_internet": null,
  "static_egress_ip": true,
  "private_network": null,
  "self_host": true,
  "byoc": true,
  "open_source": false,
  "soc2": true,
  "hipaa": false,
  "sso": true,
  "gpu": false,
  "arm64": false,
  "windows": false,
  "macos": false,
  "lang_python": true,
  "lang_node": true,
  "lang_go": null,
  "lang_rust": null,
  "lang_java": null,
  "gpu_desktop": null,
  "credential_injection": null,
  "egress_http_rules": false,
  "wake_on_request": false,
  "live_resize": false,
  "fork_running": false,
  "memory_snapshot_fork": false,
  "webhooks": null,
  "scheduled_wakeups": true,
  "audit_logs": true,
  "eu_data_residency": true,
  "zero_data_retention": null,
  "scoped_api_keys": null,
  "spend_limits": null,
  "mcp_server": true,
  "usage_api": false,
  "snapshot_auto": false,
  "snapshot_on_demand": false,
  "harness_api": false,
  "own_agent_api": false,
  "fast_boot": null,
  "strong_isolation": true,
  "ingress_rules": true,
  "guest_firewall": false,
  "secret_proxy": false,
  "secret_proxy_any": false,
  "volume_attach": false,
  "volume_shared": false,
  "sidecar": null,
  "fuse": true,
  "kernel_features": true,
  "burst": null
 },
 "company": {
  "id": "yepcode",
  "checked": "2026-09-30",
  "company": "YepCode",
  "ownership": {
   "value": "independent",
   "parent": null,
   "source": "https://yepcode.io/about",
   "quote": "YepCode comes from years of building integrations for real clients. Our roots go back to Trileuco Solutions (founded in 2009), a software agency in Galicia (Spain) that grew to 50 engineers before being acquired."
  },
  "stage": {
   "value": "unknown",
   "source": "",
   "quote": "",
   "confidence": "low",
   "note": "No press release, Crunchbase/PitchBook profile, or company statement disclosing any priced equity round was found (Crunchbase blocked access via Cloudflare; no TechCrunch/HN/LinkedIn funding coverage located). The Y Combinator company page for the 'yepcode' slug returns 404, so this is not a YC company. The 'About' page describes the founders' background at Trileuco Solutions, a Galician software agency (founded 2009, ~50 engineers, later acquired), suggesting the founders were experienced/self-funded operators, but no explicit 'bootstrapped'/self-funded statement or funding amount was found for YepCode itself, so stage is left unknown rather than guessed."
  },
  "accelerators": [],
  "total_funding_usd": {
   "value": null,
   "status": "unknown"
  },
  "last_round": {
   "type": null,
   "amount_usd": null,
   "date": null,
   "leads": [],
   "status": "unknown",
   "source": "",
   "quote": ""
  },
  "investors": [],
  "portfolio_listings": [],
  "revenue": {
   "value": null,
   "status": "unknown"
  },
  "employees": {
   "value": null,
   "source": ""
  },
  "note": "YepCode Run (serverless JS/Python execution sandboxes on Firecracker microVMs) is a product of YepCode, a Spanish (Galicia) company whose founders' prior venture, Trileuco Solutions, a software agency founded in 2009 that grew to ~50 engineers, was acquired. YepCode itself launched publicly via Show HN posts (YepCode Recipes, Aug 2022; YepCode Run, Feb 2025). No funding round, investor, accelerator participation, or revenue figures were found in company pages, HN, or search; Crunchbase and Bing search results were inaccessible (Cloudflare block / no indexable results) within the research time budget, so funding stage, amount, and revenue are left unknown rather than guessed."
 },
 "id": "yepcode",
 "name": "YepCode Run",
 "url": "https://yepcode.io/pricing/",
 "category": "paas",
 "isolation": "firecracker",
 "modes": [
  {
   "key": "starter",
   "label": "Process execution on Starter (per-second Yeps)",
   "flags": [
    "alt"
   ],
   "os": [
    "linux"
   ],
   "regions": null,
   "gpu_only": false,
   "features": {},
   "pricing": "sizes",
   "vcpu_h": null,
   "ram_gib_h": null,
   "cpu_basis": "alloc",
   "ram_basis": "alloc",
   "active_floor": 0,
   "ram_per_vcpu": [
    null,
    null
   ],
   "ram_fixed_per_vcpu": null,
   "vcpu_options": null,
   "min_vcpu": null,
   "max_vcpu": null,
   "max_ram_gib": null,
   "sizes": [
    {
     "name": "Starter process sandbox (300 MB RAM, vCPU not published)",
     "vcpu": null,
     "ram_gib": 0.3,
     "disk_gib": 0.25,
     "hour": 0.036,
     "month_cap": null
    }
   ],
   "pool_tiers": null,
   "requires_always_on": false,
   "always_on_month_per_instance": null,
   "commit_note": null,
   "min_billed_seconds": 1,
   "granularity_s": 1,
   "start_fee": null,
   "boot_overhead_s": null,
   "multiplier": 1,
   "windows_vcpu_h": null,
   "gpu": null,
   "note": "1 Yep = 1 second of process execution, rounded up per execution. Overage on Starter: $0.00001 per extra Yep = $0.036/h (USD list price on https://yepcode.io/pricing/, same figure as EUR 0.00001). Priced per running process, whatever CPU it uses.",
   "plans": [
    "Starter"
   ]
  },
  {
   "key": "growth",
   "label": "Process execution on Growth (per-second Yeps)",
   "flags": [
    "alt"
   ],
   "os": [
    "linux"
   ],
   "regions": null,
   "gpu_only": false,
   "features": {},
   "pricing": "sizes",
   "vcpu_h": null,
   "ram_gib_h": null,
   "cpu_basis": "alloc",
   "ram_basis": "alloc",
   "active_floor": 0,
   "ram_per_vcpu": [
    null,
    null
   ],
   "ram_fixed_per_vcpu": null,
   "vcpu_options": null,
   "min_vcpu": null,
   "max_vcpu": null,
   "max_ram_gib": null,
   "sizes": [
    {
     "name": "Growth process sandbox (600 MB RAM, vCPU not published)",
     "vcpu": null,
     "ram_gib": 0.6,
     "disk_gib": 5,
     "hour": 0.018,
     "month_cap": null
    }
   ],
   "pool_tiers": null,
   "requires_always_on": false,
   "always_on_month_per_instance": null,
   "commit_note": null,
   "min_billed_seconds": 1,
   "granularity_s": 1,
   "start_fee": null,
   "boot_overhead_s": null,
   "multiplier": 1,
   "windows_vcpu_h": null,
   "gpu": null,
   "note": "1 Yep = 1 second of process execution, rounded up per execution. Overage on Growth: $0.000005 per extra Yep = $0.018/h (USD list price on https://yepcode.io/pricing/, same figure as EUR 0.000005). Priced per running process, whatever CPU it uses.",
   "plans": [
    "Growth"
   ]
  }
 ],
 "storage": {
  "included_disk_gib": null,
  "disk_gib_month": null,
  "disk_billed_when_stopped": null,
  "snapshot_gib_month": null,
  "paused_ram_billed": null
 },
 "network": {
  "egress_free_gib": null,
  "egress_gib": null,
  "ipv4_month": null,
  "ipv4_available": null
 },
 "plans": [
  {
   "name": "Developer",
   "fee": 0,
   "flags": [],
   "fee_is_credit": false,
   "included_usd": 0,
   "per_seat": null,
   "concurrency": 1,
   "max_session_h": 0.008333333333333333,
   "max_vcpu": null,
   "max_ram_gib": 0.15,
   "sizes_allowed": null,
   "note": "Free, no credit card. 50K Yeps/month and a daily cap of 1,800 Yeps and 300 executions (reset 00:00 CET). 1 concurrent, no queue, 30 s max execution, 150 MB RAM, 5 MB local disk. Webhooks limited to 1 req/s and 5 req/min. No overage: new executions are refused when Yeps run out. trial_only.",
   "trial_only": true,
   "max_starts_per_day": 300
  },
  {
   "name": "Starter",
   "fee": 119,
   "flags": [],
   "fee_is_credit": false,
   "included_usd": 150,
   "per_seat": 0,
   "concurrency": 10,
   "max_session_h": 1,
   "max_vcpu": null,
   "max_ram_gib": 0.3,
   "sizes_allowed": null,
   "note": "$119/month USD list price (EUR 119 for European viewers). Includes 15M Yeps (4,166.7 process-hours, = included_usd at the $0.00001/Yep overage rate); then +$0.00001 per extra Yep. Max 10 concurrent, 1 h max execution, 300 MB RAM sandboxes, up to 10 team members.",
   "included_applies_to_modes": [
    "starter"
   ]
  },
  {
   "name": "Growth",
   "fee": 599,
   "flags": [],
   "fee_is_credit": false,
   "included_usd": 750,
   "per_seat": 0,
   "concurrency": 50,
   "max_session_h": 12,
   "max_vcpu": null,
   "max_ram_gib": 0.6,
   "sizes_allowed": null,
   "note": "$599/month USD list price (EUR 599 for European viewers). Includes 150M Yeps (41,666.7 process-hours); then +$0.000005 per extra Yep. Max 50 concurrent, 12 h max execution, 600 MB RAM sandboxes, unlimited team members.",
   "included_applies_to_modes": [
    "growth"
   ]
  },
  {
   "name": "Enterprise",
   "fee": null,
   "flags": [
    "sales"
   ],
   "fee_is_credit": null,
   "included_usd": null,
   "per_seat": null,
   "concurrency": null,
   "max_session_h": null,
   "max_vcpu": null,
   "max_ram_gib": null,
   "sizes_allowed": null,
   "note": "Starting at $1,800/month (USD list price; EUR 1,800 for European viewers); custom limits; negotiated."
  }
 ],
 "free": {
  "monthly_credit": null,
  "one_time_credit": null
 },
 "features": {
  "linux": null,
  "windows": false,
  "macos": false,
  "arm64": false,
  "gpu": false,
  "snapshot": "none",
  "pause_resume": false,
  "fork": false,
  "persistent_disk": false,
  "volumes": null,
  "auto_stop_idle": false,
  "max_session_h": 12,
  "custom_image": false,
  "docker_inside": false,
  "nested_virt": false,
  "root": null,
  "systemd": null,
  "browser": false,
  "desktop": false,
  "computer_use": false,
  "code_interpreter": true,
  "agent_harnesses": false,
  "ssh": false,
  "public_ipv4": false,
  "inbound_https": true,
  "custom_domain": null,
  "raw_tcp_inbound": null,
  "egress_allowlist": false,
  "static_egress_ip": true,
  "private_network": null,
  "self_host": true,
  "byoc": true,
  "open_source": false,
  "soc2": true,
  "hipaa": false,
  "sso": true,
  "gpu_types": [],
  "regions": [],
  "lang_python": true,
  "lang_node": true,
  "lang_go": null,
  "lang_rust": null,
  "lang_java": null,
  "gpu_desktop": null,
  "credential_injection": null,
  "egress_http_rules": false,
  "wake_on_request": false,
  "live_resize": false,
  "fork_running": false,
  "memory_snapshot_fork": false,
  "webhooks": null,
  "scheduled_wakeups": true,
  "audit_logs": true,
  "eu_data_residency": true,
  "zero_data_retention": null,
  "scoped_api_keys": null,
  "spend_limits": null,
  "mcp_server": true,
  "snapshot_auto": false,
  "snapshot_on_demand": false,
  "harness_api": false,
  "ingress_rules": true,
  "secret_proxy": false,
  "volume_attach": false,
  "volume_shared": false,
  "isolation": "firecracker",
  "image_oci": false,
  "anti_bot": false,
  "captcha_solving": false,
  "egress_ip_type": "static-datacenter",
  "own_agent_api": false,
  "guest_firewall": false,
  "usage_api": false
 },
 "perf": {
  "cpu_runs_s": null,
  "cold_start_ms": null,
  "burst_tti_ms": null,
  "dax_s": null
 },
 "knobs": [],
 "caveats": [
  "Prices are published in both USD and EUR with the same numbers ($119 / EUR 119 Starter, $599 / EUR 599 Growth, $1,800 / EUR 1,800 Enterprise, overage $0.00001 / $0.000005 per Yep). The page picks the currency from the viewer's browser (a Europe/ time zone or a de/fr/it/es/nl/pt language shows EUR, everyone else USD); the card uses the USD list prices, so no FX conversion. Each plan has its own overage rate, so each regime is tied to one plan. vCPU per process is not published (sizes unsized).",
  "Yeps are rounded-up seconds of process execution. General JS/Python execution service; self-serve memory only 300MB/600MB, not arbitrary 8GiB machines.",
  "Features set to null were not verified. No sandbox was purchased or tested; feature/performance statements are documentation claims. Null maximums are unknown unless a cited note explicitly states unlimited.",
  "A complete monthly bill requires known snapshot/egress/plan limits; do not silently treat missing ancillary charges as free.",
  "Yep allowances reset on the 1st of each month (00:00 CET) and do not roll over. On paid plans overage is automatic, invoiced at the plan's fixed per-Yep price, with no published spend cap. All purchases are non-refundable. Sales tax/VAT is added on top. The pricing page no longer states an invoice currency (it shows EUR to European viewers and USD to others; cards via Stripe).",
  "On-premise executors (self-host the execution layer, with the control plane in YepCode cloud) are available on Growth and Enterprise. Full-stack on-premise requires Enterprise. On-prem limits are 'TBD' (sales).",
  "Queue and rate limits: Starter 100 queued executions, 10 HTTP req/s, 25 dependencies, 100 dependency installs/day, start delay p95 < 15 s; Growth 1,000 queued, 50 HTTP req/s, start delay p95 < 3 s."
 ],
 "sources": [
  "https://yepcode.io/pricing/",
  "https://yepcode.io/docs/processes/source-code/",
  "https://yepcode.io/blog/secure-code-execution-in-ai-agents.md"
 ],
 "fleet": {
  "default_max_instances": 1,
  "default_max_vcpu": null,
  "default_max_gpus": null,
  "raise": "self-serve",
  "raise_time_days": null,
  "verification": "Developer free plan requires no credit card.",
  "tiers": "Higher paid plans provide more concurrency; custom enterprise arrangements available.",
  "notes": "Developer: 1 concurrent execution, 300 executions/day, 30 seconds/execution. Queue time is not running concurrency. Paid plan limits and execution credits both matter; no approval SLA specified.",
  "sources": [
   "https://yepcode.io/pricing/",
   "https://yepcode.io/docs/plans-and-limits/"
  ],
  "researched": "2026-09-28"
 },
 "audit_2026_09_29": {
  "applied": 13,
  "source": "checked against the provider's live pricing and docs pages",
  "reviewed": 5
 },
 "feature_evidence": {
  "snapshot_auto": {
   "value": false,
   "source": "https://yepcode.io/docs/processes/local-disk/",
   "quote": "YepCode provides a temporary directory for storing files during process execution.",
   "note": "Serverless per-execution model: each process execution runs in a fresh Firecracker microVM with a temporary local disk (5 MB-5 GB by plan) that ends with the execution. Nothing is saved or restored between executions; state lives in YepCode Storage (file API) or Datastore (key-value) that code writes explicitly.",
   "checked": "2026-09-29"
  },
  "snapshot_on_demand": {
   "value": false,
   "source": "https://cloud.yepcode.io/api/rest/public/api-docs",
   "quote": "Stops the sandbox on its VM instance and marks the sandbox as killed in the API.",
   "note": "The full public REST API (OpenAPI 3.1) has no snapshot/checkpoint/fork endpoints; the new Sandboxes resource only has create, update-timeout and kill. Docs never mention snapshots.",
   "checked": "2026-09-29"
  },
  "harness_api": {
   "value": false,
   "source": "https://yepcode.io/docs/yep-agent/",
   "quote": "In YepCode Cloud: open any process in your team and launch Yep Agent to start prompting against your workspace.",
   "note": "Yep Agent is YepCode's own coding agent (OpenCode running in a Firecracker microVM, per the 'Making Of' blog), but it is only reachable from the web UI and the /ai landing. The REST API, JS/Python SDKs and CLI have no endpoints to start it, send prompts or stream its events. The MCP server exposes run_code/process tools to external agents, which is the reverse direction.",
   "checked": "2026-09-29"
  },
  "ingress_rules": {
   "value": true,
   "source": "https://cloud.yepcode.io/api/rest/public/api-docs",
   "quote": "HTTP basic authentication for exposed public ports: user:credential.",
   "note": "Undocumented outside the OpenAPI spec: POST /sandboxes takes publicHttpPorts ('List of public HTTP ports to expose.') and publicHttpPortsBasicAuth, so you choose which ports are exposed and can put basic auth in front of them. Regular process executions expose no ports; their webhook endpoints take optional basic auth ('If you don't provide a user and password, no authentication would be needed to start the process', docs/executions/webhooks). No IP allowlists or private URLs documented.",
   "checked": "2026-09-29"
  },
  "secret_proxy": {
   "value": false,
   "source": "https://yepcode.io/docs/processes/team-variables/",
   "quote": "Subsequently, apiKey will contain the value defined in the team variable regardless of whether it was marked as secured or not. Exercise caution to avoid logging or transmitting it from the code.",
   "note": "Secrets are team variables (encrypted at rest, 'secured' flag) injected as environment variables into the sandbox; the code sees the real value. The 'without exposing secret values to the LLM' claim (Yep Agent, run_code MCP tool) means the LLM only writes code that reads env vars, not that a proxy injects credentials.",
   "checked": "2026-09-29"
  },
  "volume_attach": {
   "value": false,
   "source": "https://yepcode.io/docs/plans-and-limits/",
   "quote": "YepCode allows to store files in the file system used during the execution of a process. The number and size of files is limited based on your plan.",
   "note": "Only a per-execution local disk (5 MB Developer, 250 MB Starter, 5 GB Growth, unlimited Enterprise). No attachable volumes; persistent files go to YepCode Storage, an object store used through SDK/REST upload/download calls (max 5/100/1,000 files), not a mount.",
   "checked": "2026-09-29"
  },
  "volume_shared": {
   "value": false,
   "source": "https://yepcode.io/docs/storage/",
   "quote": "File Sharing: Create temporary file storage for sharing between processes",
   "note": "YepCode Storage is shared by all processes of a team, read-write, but only through API calls (yepcode.storage.upload/download/list/delete, signed URLs), not mounted as a filesystem. No shared volumes.",
   "checked": "2026-09-29"
  },
  "isolation": {
   "value": "firecracker",
   "source": "https://yepcode.io/blog/an-overview-of-yepcode-technology-stack/",
   "quote": "We solved the sandboxing challenge using Firecracker, an open-source virtualization technology that enables secure and fast microVMs.",
   "note": null,
   "checked": "2026-09-30"
  },
  "image_oci": {
   "value": false,
   "source": "https://yepcode.io/docs/processes/source-code/",
   "quote": "We use the NodeJS v22 engine ... We use the Python v3.13 engine.",
   "note": "not offered: outside the product's scope — YepCode Run executes JS/Python code inside fixed, provider-built Firecracker microVM runtimes; there is no way to start a sandbox from a customer-supplied Docker/OCI image (custom_image is already false on the card).",
   "checked": "2026-10-14"
  },
  "docker_inside": {
   "value": false,
   "source": "https://yepcode.io/blog/secure-code-execution-in-ai-agents.md",
   "quote": "YepCode Run gives you a serverless execution plane for JavaScript and Python ... No Dockerfiles to maintain and no host exposure.",
   "note": "not offered: outside the product's scope — it is a per-execution JS/Python code sandbox with npm/pip dependency installs, not a general-purpose machine; no documented way to run Docker containers inside an execution.",
   "checked": "2026-10-14"
  },
  "nested_virt": {
   "value": false,
   "source": "https://yepcode.io/blog/an-overview-of-yepcode-technology-stack/",
   "quote": "Security is paramount when running user-generated code in a multi-tenant environment. We solved the sandboxing challenge using Firecracker.",
   "note": "not offered: outside the product's scope — each execution is a lightweight, ephemeral Firecracker microVM running a fixed JS/Python runtime; no /dev/kvm or nested-VM capability is documented.",
   "checked": "2026-09-30"
  },
  "desktop": {
   "value": false,
   "source": "https://yepcode.io/llms.txt",
   "quote": "Easily run AI-generated code in a secure, scalable environment with full support for dependencies, secrets, logs, and access to APIs or databases.",
   "note": "not offered: outside the product's scope — headless code-execution PaaS, no VNC/RDP/streamed desktop.",
   "checked": "2026-10-14"
  },
  "browser": {
   "value": false,
   "source": "https://yepcode.io/llms.txt",
   "quote": "Easily run AI-generated code in a secure, scalable environment with full support for dependencies, secrets, logs, and access to APIs or databases.",
   "note": "not offered: outside the product's scope — no managed/real browser is documented as available inside the JS/Python execution sandbox.",
   "checked": "2026-10-14"
  },
  "computer_use": {
   "value": false,
   "source": "https://yepcode.io/llms.txt",
   "quote": "Easily run AI-generated code in a secure, scalable environment with full support for dependencies, secrets, logs, and access to APIs or databases.",
   "note": "not offered: outside the product's scope — there is no screenshot+click desktop-driving API; the only agent-facing surface is code execution and the MCP tool server.",
   "checked": "2026-10-14"
  },
  "anti_bot": {
   "value": false,
   "source": "https://yepcode.io/llms.txt",
   "quote": "Easily run AI-generated code in a secure, scalable environment with full support for dependencies, secrets, logs, and access to APIs or databases.",
   "note": "not offered: outside the product's scope — a headless server-side code runtime, not a browser/stealth product; no anti-detection/fingerprinting features documented.",
   "checked": "2026-10-14"
  },
  "captcha_solving": {
   "value": false,
   "source": "https://yepcode.io/llms.txt",
   "quote": "Easily run AI-generated code in a secure, scalable environment with full support for dependencies, secrets, logs, and access to APIs or databases.",
   "note": "not offered: outside the product's scope — no browser/CAPTCHA-solving capability documented for this JS/Python execution PaaS.",
   "checked": "2026-10-14"
  },
  "egress_ip_type": {
   "value": "static-datacenter",
   "source": "https://yepcode.io/docs/network-access",
   "quote": "Configure your firewalls to allow connections from the IP 34.89.54.108 for the required ports.",
   "note": "Fixed outbound IP is a Google Cloud (GCP) address (AS396982 Google LLC, per ipinfo.io lookup) — a static datacenter IP, not residential/mobile.",
   "checked": "2026-09-30"
  },
  "ssh": {
   "value": false,
   "source": "https://yepcode.io/docs/network-access",
   "quote": "We provide a tunneling system that exposes your ports for YepCode using SSH tunnels.",
   "note": "not offered: outside the product's scope — the only SSH-related feature is an outbound tunneling helper to reach a customer's private services; there is no way to SSH into the execution sandbox itself (it is ephemeral, per-execution, with no shell access documented).",
   "checked": "2026-09-30"
  },
  "snapshot": {
   "value": "none",
   "source": "https://cloud.yepcode.io/api/rest/public/api-docs",
   "quote": "Stops the sandbox on its VM instance and marks the sandbox as killed in the API.",
   "note": "Confirmed via feature_evidence.snapshot_on_demand/snapshot_auto on the card: the REST API's Sandboxes resource only has create/update-timeout/kill; no snapshot, checkpoint, or restore endpoints exist anywhere in the docs or OpenAPI spec.",
   "checked": "2026-09-30"
  },
  "fork": {
   "value": false,
   "source": "https://cloud.yepcode.io/api/rest/public/api-docs",
   "quote": "Stops the sandbox on its VM instance and marks the sandbox as killed in the API.",
   "note": "not offered: the full public REST API (create/update-timeout/kill for Sandboxes; create/duplicate for Processes) has no clone-a-running-machine or fork operation.",
   "checked": "2026-09-30"
  },
  "fork_running": {
   "value": false,
   "source": "https://cloud.yepcode.io/api/rest/public/api-docs",
   "quote": "Stops the sandbox on its VM instance and marks the sandbox as killed in the API.",
   "note": "not offered: no fork capability at all (see `fork`), so cloning a running machine without stopping it is not possible.",
   "checked": "2026-09-30"
  },
  "memory_snapshot_fork": {
   "value": false,
   "source": "https://cloud.yepcode.io/api/rest/public/api-docs",
   "quote": "Stops the sandbox on its VM instance and marks the sandbox as killed in the API.",
   "note": "not offered: no fork or snapshot capability exists, so a memory-preserving fork is not possible.",
   "checked": "2026-09-30"
  },
  "pause_resume": {
   "value": false,
   "source": "https://cloud.yepcode.io/api/rest/public/api-docs",
   "quote": "Stops the sandbox on its VM instance and marks the sandbox as killed in the API.",
   "note": "not offered: the only lifecycle operations documented for a sandbox/execution are create, update-timeout, and kill; there is no pause/resume (the 'Pause a Periodic Execution' feature only pauses a cron *schedule*, it does not pause a running machine).",
   "checked": "2026-09-30"
  },
  "wake_on_request": {
   "value": false,
   "source": "https://yepcode.io/blog/secure-code-execution-in-ai-agents.md",
   "quote": "YepCode Run gives you a serverless execution plane for JavaScript and Python ... You send code; it runs safely; you get results.",
   "note": "not offered: outside the product's scope — there is no persistent/stoppable machine to wake; each webhook/on-demand/scheduled trigger spins up a brand-new ephemeral microVM per execution instead of waking a sleeping one.",
   "checked": "2026-10-14"
  },
  "auto_stop_idle": {
   "value": false,
   "source": "https://yepcode.io/blog/secure-code-execution-in-ai-agents.md",
   "quote": "YepCode Run gives you a serverless execution plane for JavaScript and Python ... You send code; it runs safely; you get results.",
   "note": "not offered: outside the product's scope — there is no long-lived machine that can idle; each execution's microVM ends when the process finishes or its max-time-per-execution limit is hit.",
   "checked": "2026-10-14"
  },
  "live_resize": {
   "value": false,
   "source": "https://yepcode.io/docs/plans-and-limits.md",
   "quote": "STARTER ... 300 MB RAM sandboxes ... GROWTH ... 600 MB RAM sandboxes",
   "note": "not offered: sandbox RAM size is fixed per plan (150/300/600 MB); no API/CLI to resize CPU/RAM of a running sandbox is documented.",
   "checked": "2026-09-30"
  },
  "agent_harnesses": {
   "value": false,
   "source": "https://yepcode.io/docs/yep-agent/",
   "quote": "In YepCode Cloud: open any process in your team and launch Yep Agent to start prompting against your workspace.",
   "note": "Yep Agent (built on OpenCode, running in its own Firecracker-based sandbox) is a product feature reachable only from the web UI/landing — it is not a selectable coding-harness template (Claude Code/Codex/OpenCode, etc.) that users install into their own execution sandboxes. Matches card's harness_api=false.",
   "checked": "2026-09-30"
  },
  "own_agent_api": {
   "value": false,
   "source": "https://yepcode.io/docs/yep-agent/",
   "quote": "In YepCode Cloud: open any process in your team and launch Yep Agent to start prompting against your workspace.",
   "note": "Yep Agent is YepCode's own task agent, but the REST API, JS/Python SDKs, and CLI expose no endpoints to start it, send it prompts, or stream its events — it is UI-only. The MCP server runs in the opposite direction (external agents driving YepCode).",
   "checked": "2026-09-30"
  },
  "public_ipv4": {
   "value": false,
   "source": "https://yepcode.io/docs/network-access",
   "quote": "Configure your firewalls to allow connections from the IP 34.89.54.108 for the required ports.",
   "note": "not offered: outside the product's scope — 34.89.54.108 is YepCode's own shared outbound egress IP for all customers, not a dedicated public IPv4 assigned per customer machine; sandboxes have no per-machine public IPv4.",
   "checked": "2026-09-30"
  },
  "inbound_https": {
   "value": true,
   "source": "https://cloud.yepcode.io/api/rest/public/api-docs",
   "quote": "HTTP basic authentication for exposed public ports: user:credential.",
   "note": "The Sandboxes REST resource accepts publicHttpPorts ('List of public HTTP ports to expose') plus optional basic auth, i.e. ports on the sandbox can be exposed and reached over HTTPS; separately, process webhook endpoints are HTTPS URLs on cloud.yepcode.io. Undocumented in prose docs, only visible in the OpenAPI spec (per card's ingress_rules evidence).",
   "checked": "2026-09-30"
  },
  "egress_allowlist": {
   "value": false,
   "source": "https://yepcode.io/docs/network-access",
   "quote": "When using YepCode with a service that is not accessible from the internet ... you need to configure access to allow YepCode servers to connect.",
   "note": "not offered: the only documented network-access control runs the opposite direction (the customer allowlists YepCode's fixed IP into their own firewall); there is no provider-side feature to restrict a sandbox's own outbound egress (no allowlist/deny-list/no-internet mode documented).",
   "checked": "2026-09-30"
  },
  "egress_http_rules": {
   "value": false,
   "source": "https://yepcode.io/docs/network-access",
   "quote": "When using YepCode with a service that is not accessible from the internet ... you need to configure access to allow YepCode servers to connect.",
   "note": "not offered: no method/path-level outbound HTTP egress rules are documented; the product provides no provider-side egress control feature at all (see egress_allowlist).",
   "checked": "2026-09-30"
  },
  "gpu": {
   "value": false,
   "source": "https://yepcode.io/docs/plans-and-limits.md",
   "quote": "YepCode offers a variety of pricing plans tailored to your needs.",
   "note": "not offered: outside the product's scope — sandboxes are described only by RAM/disk/time limits for JS/Python process execution; no GPU instance option is documented anywhere on pricing/docs.",
   "checked": "2026-09-30"
  },
  "windows": {
   "value": false,
   "source": "https://yepcode.io/docs/processes/source-code/",
   "quote": "We use the NodeJS v22 engine ... We use the Python v3.13 engine.",
   "note": "not offered: outside the product's scope — Firecracker microVMs run a fixed Linux-based JS/Python execution image; no Windows machine option is documented.",
   "checked": "2026-10-14"
  },
  "macos": {
   "value": false,
   "source": "https://yepcode.io/docs/processes/source-code/",
   "quote": "We use the NodeJS v22 engine ... We use the Python v3.13 engine.",
   "note": "not offered: outside the product's scope — Firecracker (Linux KVM-based microVM tech) cannot run macOS, and no macOS option is documented.",
   "checked": "2026-10-14"
  },
  "open_source": {
   "value": false,
   "source": "https://github.com/yepcode/mcp-server-js",
   "quote": "Self-host (NPX or Docker) ... Open source · MIT",
   "note": "Only the MCP server connector (yepcode/mcp-server-js, MIT) is open source; the core YepCode Run/Workflow platform is closed-source (private Docker registry, per the technology-stack blog post) and only offered as SaaS or paid on-premise/self-host deployments.",
   "checked": "2026-09-30"
  },
  "hipaa": {
   "value": false,
   "source": "https://yepcode.io/blog/yepcode-achieves-soc2-type-i-security-certification/",
   "quote": "In addition to our SOC2 Type I certification, we are also proud to announce that YepCode is fully GDPR compliant.",
   "note": "not offered: compliance claims on the blog/trust pages cover SOC 2 Type I and GDPR only; HIPAA/BAA is never mentioned in any docs, blog, or pricing page found.",
   "checked": "2026-09-30"
  },
  "eu_data_residency": {
   "value": true,
   "source": "https://yepcode.io/docs/on-premise.md",
   "quote": "We have thought about that, and we provide two main flavors for on-premise installations: Full Stack On-Premise / Only Executors Layer On-Premise.",
   "note": "Combined with GDPR compliance (blog) and the option to deploy the full stack (or just the executors layer) into the customer's own infrastructure, EU customers can keep machines/data in EU regions via on-premise; the standard SaaS control-plane's own hosting region is not published.",
   "checked": "2026-09-30"
  },
  "max_session_h": {
   "value": 12,
   "source": "https://yepcode.io/docs/plans-and-limits.md",
   "quote": "GROWTH - YepCode Cloud | 12 hours",
   "note": "Varies by plan: DEVELOPER 30 seconds, STARTER 1 hour, GROWTH (cloud) 12 hours, GROWTH on-premise/ENTERPRISE 'TBD' (custom, can run 'as long as needed'). 12h is the highest self-serve documented ceiling; Enterprise is negotiated/unbounded.",
   "checked": "2026-09-30"
  },
  "guest_firewall": {
   "value": false,
   "source": "https://yepcode.io/blog/secure-code-execution-in-ai-agents.md",
   "quote": "YepCode Run gives you a serverless execution plane for JavaScript and Python ... You send code; it runs safely; you get results.",
   "note": "not offered: outside the product's scope — YepCode Run is a per-execution JS/Python code sandbox with no shell/SSH access and no documented root/sudo (root is unverified/null on the card, ssh=false, docker_inside=false); there is no way for a customer to reach a shell inside the ephemeral Firecracker microVM to configure nftables/iptables.",
   "checked": "2026-10-14"
  },
  "arm64": {
   "value": false,
   "source": "https://yepcode.io/blog/an-overview-of-yepcode-technology-stack/",
   "quote": "We solved the sandboxing challenge using Firecracker, an open-source virtualization technology that enables secure and fast microVMs.",
   "note": "not offered: outside the product's scope — YepCode Run only exposes fixed JS/Python execution runtimes with no selectable machine architecture; no ARM/aarch64 sandbox option is mentioned anywhere in the pricing, docs, or technology-stack pages, and the product's own outbound IP resolves to a standard GCP address with no Tau-T2A/ARM branding mentioned.",
   "checked": "2026-09-30"
  },
  "usage_api": {
   "value": false,
   "source": "https://yepcode.io/pricing/",
   "quote": "The platform includes widgets that show consumed and available Yeps for the current cycle. You can also see available Yeps and other limits in the Settings page. [...] Where can I see a breakdown of my team usage? The platform includes widgets that show consumed and available Yeps for the current cy",
   "note": "granularity: account-only; cost: no; Usage tracking is dashboard-only (web UI widgets and Settings page). The public REST API (OpenAPI 3.1 at https://cloud.yepcode.io/api/rest/public/api-docs) has no billing/usage/cost endpoints. Executions are tracked but usage/consumption metrics are not queryable via API/SDK/CLI—only via the web dashboard.",
   "confidence": "high",
   "checked": "2026-10-01"
  },
  "plan_fees": {
   "value": {
    "Starter": 119,
    "Growth": 599,
    "Enterprise": 1800
   },
   "source": "https://yepcode.io/pricing/",
   "quote": "data-price=\"{\"usd\":{\"value\":\"119\",\"extraPrice\":\"0.00001\"},\"eur\":{\"value\":\"119\",\"extraPrice\":\"0,00001\"}}\"",
   "note": "Growth: {\"usd\":{\"value\":\"599\",\"extraPrice\":\"0.000005\"},...}; Enterprise {\"usd\":{\"value\":\"1,800\"},...}. Rendered client-side by a script that returns \"EUR\" for Europe/ time zones or de/fr/it/es/nl/pt languages, else \"USD\". Replaces the earlier EUR-only reading converted at 1.1378 USD/EUR ($135.40 / $681.54).",
   "checked": "2026-10-14"
  }
 },
 "locations": [],
 "locations_source": "https://yepcode.io/docs/plans-and-limits/",
 "locations_quote": "YepCode offers a variety of pricing plans tailored to your needs. For users requiring more executions, extended execution time, or collaborative features within a team, upgrading to a higher plan is available. YepCode is an enterprise-ready platform, and we can discuss and provide a personalized ENT",
 "locations_checked": "2026-10-01",
 "audit_2026_10_14": {
  "applied": 2,
  "source": "card findings re-verified against the live pricing page and docs",
  "reviewed": 2
 }
}