{
 "features_resolved": {
  "snapshot_any": true,
  "snapshot_mem": false,
  "fork": false,
  "pause_resume": true,
  "persistent_disk": true,
  "whole_disk": true,
  "persist_scope": true,
  "volumes": false,
  "auto_stop_idle": false,
  "long_sessions": true,
  "custom_image": true,
  "image_snapshot": true,
  "image_oci": false,
  "vm_isolation": true,
  "docker_inside": true,
  "nested_virt": false,
  "root": true,
  "systemd": null,
  "browser": true,
  "desktop": true,
  "computer_use": true,
  "code_interpreter": null,
  "browser_control": null,
  "desktop_control": null,
  "browser_and_desktop": true,
  "anti_bot": false,
  "captcha_solving": false,
  "residential_ip": false,
  "agent_harnesses": true,
  "ssh": true,
  "public_ipv4": false,
  "inbound_https": true,
  "custom_domain": null,
  "raw_tcp_inbound": null,
  "egress_allowlist": false,
  "open_internet": null,
  "static_egress_ip": false,
  "private_network": null,
  "self_host": false,
  "byoc": false,
  "open_source": false,
  "soc2": false,
  "hipaa": false,
  "sso": false,
  "gpu": false,
  "arm64": false,
  "windows": false,
  "macos": false,
  "lang_python": true,
  "lang_node": true,
  "lang_go": null,
  "lang_rust": null,
  "lang_java": null,
  "gpu_desktop": null,
  "credential_injection": true,
  "egress_http_rules": false,
  "wake_on_request": false,
  "live_resize": true,
  "fork_running": false,
  "memory_snapshot_fork": false,
  "webhooks": null,
  "scheduled_wakeups": null,
  "audit_logs": null,
  "eu_data_residency": false,
  "zero_data_retention": null,
  "scoped_api_keys": null,
  "spend_limits": null,
  "mcp_server": false,
  "usage_api": false,
  "snapshot_auto": false,
  "snapshot_on_demand": true,
  "harness_api": false,
  "own_agent_api": false,
  "fast_boot": null,
  "strong_isolation": true,
  "ingress_rules": false,
  "guest_firewall": true,
  "secret_proxy": true,
  "secret_proxy_any": true,
  "volume_attach": false,
  "volume_shared": false,
  "sidecar": null,
  "fuse": true,
  "kernel_features": true,
  "burst": null
 },
 "company": {
  "id": "zipbox",
  "checked": "2026-09-30",
  "company": "Tribes, Inc.",
  "ownership": {
   "value": "independent",
   "parent": "Tribes, Inc.",
   "source": "https://zipbox.ai/",
   "quote": "\"parentOrganization\": {\"@type\": \"Organization\", \"name\": \"Tribes Inc.\", \"url\": \"https://tribes.xyz\"}"
  },
  "stage": {
   "value": "pre-seed",
   "source": "https://tribes.xyz/",
   "quote": "Funding RAISED $3.3M PRE-SEED",
   "confidence": "high",
   "note": "This is Tribes, Inc.'s (the parent company's) only priced round; Zipbox is one of Tribes' products (alongside Chief and the retired Tape Room), not a separately funded entity."
  },
  "accelerators": [],
  "total_funding_usd": {
   "value": 3300000,
   "status": "confirmed",
   "basis": "company-stated total on tribes.xyz",
   "source": "https://tribes.xyz/",
   "quote": "Funding RAISED $3.3M PRE-SEED"
  },
  "last_round": {
   "type": "pre-seed",
   "amount_usd": 3300000,
   "date": "2022-10",
   "leads": [
    "Kindred Ventures"
   ],
   "status": "confirmed",
   "source": "https://tribes.xyz/",
   "quote": "We started in 2021 with a social wallet, and closed a $3.3M pre-seed in October 2022 from Kindred Ventures, South Park Commons, Script Capital and the Solana Foundation."
  },
  "investors": [
   "Kindred Ventures",
   "South Park Commons",
   "Script Capital",
   "Solana Foundation"
  ],
  "portfolio_listings": [],
  "revenue": {
   "value": null,
   "status": "unknown"
  },
  "employees": {
   "value": null,
   "source": "https://tribes.xyz/"
  },
  "note": "Zipbox (zipbox.ai) is one of several products built by Tribes, Inc. (founded 2021, California), a small crypto/AI-agent product studio with alumni from Coinbase, Apple, Twitter and Lyft. Tribes raised a $3.3M pre-seed in October 2022 (Kindred Ventures, South Park Commons, Script Capital, Solana Foundation) — the funding covers the whole company, not Zipbox specifically; Tribes' other products are Chief (open source, on GitHub) and Tape Room (a crypto trading terminal, now retired). No YC or other accelerator affiliation found. No revenue/ARR figures published for either Tribes or Zipbox."
 },
 "id": "zipbox",
 "name": "zipbox",
 "url": "https://zipbox.ai/pricing",
 "category": "agent-sandbox",
 "isolation": "firecracker",
 "modes": [
  {
   "key": "on-demand",
   "label": "Per-second fixed VM sizes",
   "flags": [],
   "os": [
    "linux"
   ],
   "regions": null,
   "gpu_only": false,
   "features": {
    "isolation": "firecracker"
   },
   "pricing": "sizes",
   "sizes": [
    {
     "name": "Tiny",
     "vcpu": 1,
     "ram_gib": 2,
     "disk_gib": 20,
     "hour": 0.0068,
     "month_cap": null
    },
    {
     "name": "Small",
     "vcpu": 2,
     "ram_gib": 4,
     "disk_gib": 80,
     "hour": 0.0137,
     "month_cap": null
    },
    {
     "name": "Medium",
     "vcpu": 4,
     "ram_gib": 8,
     "disk_gib": 160,
     "hour": 0.0274,
     "month_cap": null
    },
    {
     "name": "Large",
     "vcpu": 6,
     "ram_gib": 16,
     "disk_gib": 320,
     "hour": 0.0548,
     "month_cap": null
    }
   ],
   "pool_tiers": null,
   "requires_always_on": false,
   "always_on_month_per_instance": null,
   "commit_note": null,
   "min_billed_seconds": null,
   "granularity_s": 1,
   "start_fee": null,
   "boot_overhead_s": null,
   "multiplier": 1,
   "windows_vcpu_h": null,
   "gpu": null,
   "note": "Published hourly list rates (zipbox.ai/pricing and /docs/pricing, 2026-09-28): Tiny $0.0068, Small $0.0137, Medium $0.0274, Large $0.0548 per hour, \"Machine time metered by the second while running\"; the \"~$5/$10/$20/$40 /mo\" always-on figures are just hourly x ~730, not a cap or discount. \"Paused boxes cost $0\". Larger sizes via support.",
   "max_vcpu": 6,
   "max_ram_gib": 16,
   "cpu_basis": "alloc",
   "ram_basis": "alloc",
   "note (append)": "Platform-proxied LLM calls billed at provider cost + 3%; bring-your-own subscription bills machine time only. Paused = disk archived, meter stops; restore boots the same disk on fresh hardware (no memory state)."
  }
 ],
 "storage": {
  "included_disk_gib": null,
  "disk_gib_month": null,
  "disk_billed_when_stopped": false,
  "snapshot_gib_month": 0,
  "paused_ram_billed": false,
  "deleted_archive_days": 30
 },
 "network": {
  "egress_free_gib": null,
  "egress_gib": null,
  "ipv4_month": null,
  "ipv4_available": null
 },
 "plans": [
  {
   "name": "Prepaid pay as you go",
   "fee": 0,
   "flags": [],
   "fee_is_credit": false,
   "included_usd": null,
   "per_seat": null,
   "concurrency": null,
   "max_session_h": null,
   "max_vcpu": null,
   "max_ram_gib": null,
   "sizes_allowed": null,
   "note": "Prepaid credit, no subscription; minimum top-up $5; credits never expire; a positive balance is required to boot. At $0 balance a 1-hour grace window, then running boxes are paused (archived). Concurrency limit not published."
  }
 ],
 "free": {
  "one_time_credit": 25,
  "monthly_credit": null
 },
 "features": {
  "linux": true,
  "windows": false,
  "macos": false,
  "arm64": false,
  "gpu": false,
  "snapshot": "fs",
  "pause_resume": true,
  "fork": false,
  "persistent_disk": true,
  "volumes": null,
  "auto_stop_idle": false,
  "max_session_h": null,
  "custom_image": false,
  "docker_inside": true,
  "nested_virt": false,
  "root": true,
  "systemd": null,
  "browser": true,
  "desktop": true,
  "computer_use": true,
  "code_interpreter": null,
  "agent_harnesses": true,
  "ssh": true,
  "public_ipv4": false,
  "inbound_https": true,
  "custom_domain": null,
  "raw_tcp_inbound": null,
  "egress_allowlist": false,
  "static_egress_ip": false,
  "private_network": null,
  "self_host": false,
  "byoc": false,
  "open_source": false,
  "soc2": false,
  "hipaa": false,
  "sso": false,
  "gpu_types": [],
  "regions": [],
  "lang_python": true,
  "lang_node": true,
  "lang_go": null,
  "lang_rust": null,
  "lang_java": null,
  "gpu_desktop": null,
  "credential_injection": true,
  "egress_http_rules": false,
  "wake_on_request": false,
  "live_resize": true,
  "fork_running": false,
  "memory_snapshot_fork": false,
  "webhooks": null,
  "scheduled_wakeups": null,
  "audit_logs": null,
  "eu_data_residency": false,
  "zero_data_retention": null,
  "scoped_api_keys": null,
  "spend_limits": null,
  "mcp_server": false,
  "isolation": "firecracker",
  "browser_control": null,
  "desktop_control": null,
  "anti_bot": false,
  "captcha_solving": false,
  "egress_ip_type": "datacenter",
  "ip_note": "Egress/IP and proxy options not documented; each microVM has its own public hostname and network.",
  "image_oci": false,
  "ide_in_browser": true,
  "snapshot_auto": false,
  "guest_firewall": true,
  "secret_proxy": "any-http",
  "snapshot_on_demand": true,
  "volume_attach": false,
  "volume_shared": false,
  "harness_api": false,
  "own_agent_api": false,
  "ingress_rules": false,
  "max_session_unlimited": true,
  "usage_api": false,
  "persist_scope": "whole"
 },
 "perf": {
  "cpu_runs_s": null,
  "cold_start_ms": null,
  "burst_tti_ms": null,
  "dax_s": null
 },
 "knobs": [],
 "caveats": [
  "Displayed $5/$10/$20/$40 monthly equivalents are not stated as billing caps or always-on discounts; use hourly rates.",
  "Pause saves disk; does not establish full running-memory snapshot retention.",
  "Concurrency unverified: no limit on concurrent boxes is published (null = unknown, not unlimited); max session length, egress charge and public IPv4 pricing are not published. SSH is IPv6-only.",
  "LLM/API calls using platform keys draw the same credit balance and are additional; own model subscriptions separate.",
  "Signup credit re-verified 2026-10-14: \"Every new account gets $25 in credit after a one-time $5 top-up (card or crypto) - one grant per person, and it lands in the same balance as a top-up\" (docs/pricing). The $25 is no longer free on signup: it unlocks only after paying a one-time $5 top-up (the $5 itself stays spendable balance), and it can be skipped. Credits are prepaid and non-refundable.",
  "No independent runtime/account test or performance measurement performed.",
  "Idle auto-stop not documented: pause is manual (dashboard / status bar); the only automatic pause is 1 hour after the balance hits $0. auto_stop_idle left null (no idle discount applied).",
  "Features check 2026-10-14: desktop true. docs/skills documents \"zipbox-desktop Drives the box's X11 desktop - windows, mouse, keyboard - the same session you watch from the right rail\" and the homepage calls the box \"A web operating system with a browser, a file manager, ...\" (ZipOS); the 2026-09-28 'no desktop documented' note is superseded. Fork/clone of a box and Docker-inside are undocumented (null). Firecracker (\"Each sandbox is a Firecracker microVM\", docs/security) => no /dev/kvm in guests (firecracker tests/integration_tests/security/test_nv.py)."
 ],
 "sources": [
  "https://zipbox.ai/pricing",
  "https://zipbox.ai/",
  "https://zipbox.ai/docs/quick-start",
  "https://zipbox.ai/docs/pricing",
  "https://zipbox.ai/docs/how-things-work",
  "https://zipbox.ai/docs/access",
  "https://zipbox.ai/docs/security",
  "https://zipbox.ai/docs/faq",
  "https://zipbox.ai/docs/get-started",
  "https://zipbox.ai/docs/skills",
  "https://github.com/firecracker-microvm/firecracker/blob/main/tests/integration_tests/security/test_nv.py"
 ],
 "fleet": {
  "default_max_instances": null,
  "default_max_vcpu": null,
  "default_max_gpus": null,
  "raise": null,
  "raise_time_days": null,
  "verification": "The $25 signup credit unlocks only after a one-time $5 top-up (card or crypto), one grant per person (docs/pricing, docs/faq, 2026-10-14); positive balance to boot. A card on file is not required (\"any balance above $0 boots any machine, with or without a card on file\", docs/faq); top-ups by card/crypto via Stripe and saved card for auto-refill.",
  "tiers": null,
  "notes": "Machine sizes and credit balance are published but account machine count/vCPU/GPU quotas and increase procedure are not. Requesting a larger machine is not evidence of a larger fleet entitlement.",
  "sources": [
   "https://zipbox.ai/pricing",
   "https://zipbox.ai/docs/pricing"
  ],
  "researched": "2026-09-28"
 },
 "audit_2026_09_29": {
  "applied": 6,
  "source": "checked against the provider's live pricing and docs pages",
  "reviewed": 1
 },
 "feature_evidence": {
  "snapshot_auto": {
   "value": false,
   "source": "https://zipbox.ai/docs/how-things-work",
   "quote": "Paused - the disk is archived and the meter stops ($0); Restore boots the same disk on fresh hardware",
   "note": "Pause is a user action (dashboard/status bar), or automatic 1 h after the balance hits $0; it saves the disk only (running processes lost), i.e. a persistent disk across pause/restore, not a state checkpoint. No idle auto-pause documented. Deleted boxes keep a disk archive for 30 days (retention, not a restorable snapshot feature).",
   "checked": "2026-09-29"
  },
  "guest_firewall": {
   "value": true,
   "source": "https://zipbox.ai/docs/agents",
   "quote": "Inside the box you are root.",
   "note": "Firecracker microVM with its own kernel ('Each sandbox is a Firecracker microVM ... with its own Linux kernel', how-things-work) and root, so nftables/iptables should work; not explicitly documented.",
   "checked": "2026-09-29",
   "derived": true
  },
  "secret_proxy": {
   "value": "any-http",
   "source": "https://zipbox.ai/docs/api-keys",
   "quote": "Zipbox's rule is simple: the real key never enters the machine. The box holds a public placeholder and sends it like a normal key. After the request leaves the box, the host swaps in the real key.",
   "note": "Arbitrary user-added hosts (up to 8 hosts per key, 20 keys per store), per machine or all machines; placeholder slot types: Bearer token, custom header, URL query parameter, Basic Auth, URL path, JSON body field. Mechanism: /etc/hosts points the host at 172.16.0.1, TLS terminated by a host CA the box trusts. Plus platform-billed included services (OpenAI, Anthropic, OpenRouter, xAI, Tavily, Apify, etc.). HTTPS only; non-HTTP (DB URLs etc.) must use 'Key = value' env vars that do enter the box. Root in the box can remove /etc/hosts lines to bypass (then it just lacks the key).",
   "checked": "2026-09-29"
  },
  "image_oci": {
   "value": false,
   "source": "https://zipbox.ai/docs/quick-start",
   "quote": "Everything else - machine size, a GitHub repository to clone, LLM billing, SSH keys - is on the same form, and the defaults are fine.",
   "note": "The create-sandbox form's full option list (name, agent, size, GitHub repo, LLM billing, SSH keys) has no custom Docker/OCI image field; not offered.",
   "checked": "2026-09-30"
  },
  "docker_inside": {
   "value": true,
   "source": "https://zipbox.ai/docs/agents",
   "quote": "Inside the box you are root. Agents can install packages, bind ports, rewrite configs, and run overnight jobs.",
   "note": "derived: each box is a Firecracker microVM with its own Linux kernel and full root (docs/security, docs/agents); Docker (namespaces/cgroups) runs normally in such a VM even though not explicitly documented.",
   "checked": "2026-09-30"
  },
  "anti_bot": {
   "value": false,
   "source": "https://zipbox.ai/docs/skills",
   "quote": "zipbox-browser Headless Google Chrome via Playwright CLI for JS-heavy pages, clicks, screenshots, and PDFs.",
   "note": "not offered: outside the product's scope - the browser skill is plain headless/streamed Chrome via Playwright, no stealth/fingerprint-evasion features documented.",
   "checked": "2026-09-30"
  },
  "captcha_solving": {
   "value": false,
   "source": "https://zipbox.ai/docs/skills",
   "quote": "zipbox-browser Headless Google Chrome via Playwright CLI for JS-heavy pages, clicks, screenshots, and PDFs.",
   "note": "not offered: outside the product's scope - no CAPTCHA-solving service or skill is documented anywhere in the docs.",
   "checked": "2026-09-30"
  },
  "egress_ip_type": {
   "value": "datacenter",
   "source": "https://zipbox.ai/docs/how-things-work",
   "quote": "Each sandbox is a Firecracker microVM: a small virtual machine with its own Linux kernel, filesystem, public hostname, and network.",
   "note": "derived: standard cloud/datacenter hosting infrastructure; no residential/mobile proxy or egress-IP product is offered.",
   "checked": "2026-09-30"
  },
  "snapshot_on_demand": {
   "value": true,
   "source": "https://zipbox.ai/docs/terminal-footer",
   "quote": "Pause and Restore fire straight from the click - they are recoverable and free, so neither asks first.",
   "note": "Pause is a user-triggered, whenever-you-want disk snapshot (\"the disk is archived and the meter stops\", how-things-work); it is disk-only (no running-memory state), triggered from the dashboard menu rather than a documented public API.",
   "checked": "2026-09-30"
  },
  "fork": {
   "value": false,
   "source": "https://zipbox.ai/docs/get-started",
   "quote": "The card's ⋮ menu holds the actions: Open terminal, Copy domain, Copy email, Upgrade tier, Pause, Reboot, Delete.",
   "note": "The documented set of machine actions has no Clone/Fork; not offered.",
   "checked": "2026-09-30"
  },
  "fork_running": {
   "value": false,
   "source": "https://zipbox.ai/docs/get-started",
   "quote": "The card's ⋮ menu holds the actions: Open terminal, Copy domain, Copy email, Upgrade tier, Pause, Reboot, Delete.",
   "note": "No fork feature exists at all (see fork), so cloning a running machine is not offered.",
   "checked": "2026-09-30"
  },
  "memory_snapshot_fork": {
   "value": false,
   "source": "https://zipbox.ai/docs/how-things-work",
   "quote": "Paused - the disk is archived and the meter stops ($0); Restore boots the same disk on fresh hardware",
   "note": "No fork feature exists, and even pause/restore preserves disk only, not running memory; not offered.",
   "checked": "2026-09-30"
  },
  "wake_on_request": {
   "value": false,
   "source": "https://zipbox.ai/docs/how-things-work",
   "quote": "Paused - the disk is archived and the meter stops ($0); Restore boots the same disk on fresh hardware",
   "note": "Restore is a manual dashboard action; no documented mechanism wakes a paused box automatically when an inbound request arrives.",
   "checked": "2026-09-30"
  },
  "volume_attach": {
   "value": false,
   "source": "https://zipbox.ai/docs/pricing",
   "quote": "Tiny 1 vCPU · 2 GB RAM · 20 GB disk $0.0068 /hr ... Large 6 vCPU · 16 GB RAM · 320 GB disk $0.0548 /hr",
   "note": "Disk is a fixed part of each size tier; no separate attachable-volume feature is documented.",
   "checked": "2026-09-30"
  },
  "volume_shared": {
   "value": false,
   "source": "https://zipbox.ai/docs/pricing",
   "quote": "Tiny 1 vCPU · 2 GB RAM · 20 GB disk $0.0068 /hr ... Large 6 vCPU · 16 GB RAM · 320 GB disk $0.0548 /hr",
   "note": "No volumes feature exists at all (see volume_attach), so a shared volume across machines is not offered.",
   "checked": "2026-09-30"
  },
  "auto_stop_idle": {
   "value": false,
   "source": "https://zipbox.ai/docs/pricing",
   "quote": "At $0 you get a 1-hour grace window: machines keep running (platform LLM / API calls stop immediately), then running boxes are paused.",
   "note": "The only automatic pause documented is triggered by the credit balance hitting $0, not by idleness; Pause otherwise is a manual dashboard action.",
   "checked": "2026-09-30"
  },
  "live_resize": {
   "value": true,
   "source": "https://zipbox.ai/docs/get-started",
   "quote": "You can move a running or paused machine to a bigger size later - ⋮ menu → Upgrade tier. Upgrades go strictly up; there is no downgrade.",
   "note": "Upsizing works on a running machine; downsizing is not supported.",
   "checked": "2026-09-30"
  },
  "harness_api": {
   "value": false,
   "source": "https://zipbox.ai/docs/quick-start",
   "quote": "The dashboard opens a terminal connected to your machine as root, with the agent already started.",
   "note": "No first-party API to prompt/stream/drive a coding harness programmatically was found; the product surface is the browser terminal, SSH, and dashboard, not a documented public API.",
   "checked": "2026-09-30"
  },
  "own_agent_api": {
   "value": false,
   "source": "https://zipbox.ai/docs/agents",
   "quote": "Zipbox is agent-agnostic: pick the assistant you already use.",
   "note": "not offered: outside the product's scope - Zipbox hosts third-party coding harnesses (Claude Code, Codex, etc.) rather than shipping its own task/browser/computer-use agent with an API.",
   "checked": "2026-09-30"
  },
  "mcp_server": {
   "value": false,
   "source": "https://zipbox.ai/sitemap.xml",
   "quote": "https://zipbox.ai/docs/skills, https://zipbox.ai/docs/api-keys, https://zipbox.ai/docs/access (full docs sitemap)",
   "note": "No MCP server for controlling Zipbox sandboxes is listed in the docs sitemap or any page reviewed.",
   "checked": "2026-09-30"
  },
  "lang_node": {
   "value": true,
   "source": "https://zipbox.ai/docs/get-started",
   "quote": "Claude Code - Anthropic Codex - OpenAI ... opencode - Open-source terminal agent Cline - Open-source coding agent",
   "note": "derived: Claude Code, opencode and Cline are Node.js-based CLIs shipped pre-installed and already running on boot, so a Node.js runtime must be present out of the box.",
   "checked": "2026-09-30"
  },
  "public_ipv4": {
   "value": false,
   "source": "https://zipbox.ai/docs/access",
   "quote": "SSH reaches boxes over IPv6 only - on an IPv4-only network the terminal in the browser still works, but ssh will not connect.",
   "note": "No public IPv4 per machine; the box's own network is IPv6 (inbound HTTPS is proxied via Caddy/hostname rather than a raw public IPv4).",
   "checked": "2026-09-30"
  },
  "ingress_rules": {
   "value": false,
   "source": "https://zipbox.ai/docs/skills",
   "quote": "zipbox-caddy Serves your apps over HTTPS through Caddy ... it forwards a public hostname to a port on the machine.",
   "note": "Exposing a port is a public HTTPS subdomain via Caddy with no documented auth/IP-allowlist/security-group layer; not offered.",
   "checked": "2026-09-30"
  },
  "egress_allowlist": {
   "value": false,
   "source": "https://zipbox.ai/docs/api-keys",
   "quote": "No proxy settings. Do not export HTTP_PROXY.",
   "note": "No provider-side outbound allow/deny list or no-internet mode is documented; the only edge control is credential swapping for known API hosts, not egress filtering.",
   "checked": "2026-09-30"
  },
  "egress_http_rules": {
   "value": false,
   "source": "https://zipbox.ai/docs/api-keys",
   "quote": "A placeholder only works on the host its key belongs to. Sent anywhere else - an attacker, a log, a paste bin - it is a meaningless string.",
   "note": "No HTTP method/path-level egress rule feature is documented; not offered.",
   "checked": "2026-09-30"
  },
  "static_egress_ip": {
   "value": false,
   "source": "https://zipbox.ai/docs/how-things-work",
   "quote": "Paused - the disk is archived and the meter stops ($0); Restore boots the same disk on fresh hardware",
   "note": "Restore boots the disk on fresh hardware, implying network/IP is not preserved across pause/restore; no fixed outbound IP is documented.",
   "checked": "2026-09-30"
  },
  "gpu": {
   "value": false,
   "source": "https://zipbox.ai/docs/pricing",
   "quote": "Larger sizes (XL / XXL) appear as coming soon on the pricing page - email support@tribes.xyz when you need them.",
   "note": "Only CPU sizes (Tiny/Small/Medium/Large, with XL/XXL CPU tiers coming soon) are listed; no GPU option exists.",
   "checked": "2026-09-30"
  },
  "windows": {
   "value": false,
   "source": "https://zipbox.ai/",
   "quote": "\"operatingSystem\": [ \"Web\", \"Linux\" ]",
   "note": "The product's structured data declares Linux (and Web) only.",
   "checked": "2026-09-30"
  },
  "macos": {
   "value": false,
   "source": "https://zipbox.ai/",
   "quote": "\"operatingSystem\": [ \"Web\", \"Linux\" ]",
   "note": "Linux-only Firecracker microVMs; macOS is not offered.",
   "checked": "2026-09-30"
  },
  "arm64": {
   "value": false,
   "source": "https://zipbox.ai/docs/pricing",
   "quote": "Tiny 1 vCPU · 2 GB RAM · 20 GB disk $0.0068 /hr ... Large 6 vCPU · 16 GB RAM · 320 GB disk $0.0548 /hr",
   "note": "No architecture choice is published for the machine sizes; no ARM option is documented.",
   "checked": "2026-09-30"
  },
  "self_host": {
   "value": false,
   "source": "https://zipbox.ai/",
   "quote": "zipbox: a cloud computer for your AI agent",
   "note": "not offered: outside the product's scope - Zipbox is a hosted SaaS run by Tribes, Inc., with no self-hosted deployment option documented.",
   "checked": "2026-09-30"
  },
  "byoc": {
   "value": false,
   "source": "https://zipbox.ai/",
   "quote": "zipbox: a cloud computer for your AI agent",
   "note": "not offered: outside the product's scope - no bring-your-own-cloud deployment is documented; boxes run on Zipbox's own infrastructure.",
   "checked": "2026-09-30"
  },
  "open_source": {
   "value": false,
   "source": "https://zipbox.ai/",
   "quote": "zipbox: a cloud computer for your AI agent",
   "note": "Zipbox is a commercial SaaS product from Tribes, Inc.; no OSI license for the core platform is published (the coding agents it hosts, e.g. opencode, are separately open source, but that is not the same product).",
   "checked": "2026-09-30"
  },
  "soc2": {
   "value": false,
   "source": "https://zipbox.ai/docs/security",
   "quote": "Every section below is one of those walls. Hardware isolation ... Sessions without passwords ... Keys are injected, never stored ... Report a vulnerability",
   "note": "The full Security doc covers isolation, sessions, key handling, wallets, and data retention but never mentions SOC 2 or any compliance attestation.",
   "checked": "2026-09-30"
  },
  "hipaa": {
   "value": false,
   "source": "https://zipbox.ai/docs/security",
   "quote": "Every section below is one of those walls. Hardware isolation ... Sessions without passwords ... Keys are injected, never stored ... Report a vulnerability",
   "note": "No HIPAA-eligibility or BAA offering is mentioned anywhere in the security or pricing docs.",
   "checked": "2026-09-30"
  },
  "sso": {
   "value": false,
   "source": "https://zipbox.ai/docs/quick-start",
   "quote": "Open the dashboard and sign in with an email address or a crypto wallet.",
   "note": "Sign-in is email, crypto wallet, or social login; no SAML/OIDC enterprise SSO is documented.",
   "checked": "2026-09-30"
  },
  "eu_data_residency": {
   "value": false,
   "source": "https://zipbox.ai/docs/how-things-work",
   "quote": "Each sandbox is a Firecracker microVM: a small virtual machine with its own Linux kernel, filesystem, public hostname, and network.",
   "note": "No region selection or EU data-residency option is published anywhere in the docs or pricing pages.",
   "checked": "2026-09-30"
  },
  "max_session_h": {
   "value": "none",
   "source": "https://zipbox.ai/docs/pricing",
   "quote": "Prepaid credits - no subscription Machine time metered by the second while running Paused boxes cost $0",
   "note": "No maximum session/run duration is documented anywhere in pricing, security, or lifecycle docs; a box runs until paused, rebooted, or deleted, or the credit balance hits $0.",
   "checked": "2026-09-30"
  },
  "nested_virt": {
   "value": false,
   "source": "https://zipbox.ai/docs/security",
   "quote": "Each sandbox is a Firecracker microVM - the virtualization technology that runs AWS Lambda. Unlike a container, which shares its host's kernel with every other container on the machine, each box boots its own Linux kernel under hardware virtualization (KVM), behind a deliberately tiny virtual device surface.",
   "note": "Zipbox's own security page confirms each box is a Firecracker/KVM microVM with a deliberately minimal virtual device surface; Firecracker does not expose /dev/kvm or virtualization extensions to the guest (Firecracker's own test suite, tests/integration_tests/security/test_nv.py, explicitly asserts nested virtualization is disabled inside its microVMs). No zipbox page advertises nested virtualization or /dev/kvm-in-guest support. Confirms the recorded 'no'.",
   "checked": "2026-09-30"
  },
  "lang_python": {
   "value": true,
   "source": "https://zipbox.ai/setup/codex",
   "quote": "When python wasn’t on PATH, Codex noticed, switched to python3, and finished the fix. Ran python3 -m unittest -v: test_even_list ... ok test_odd_list ... ok",
   "note": "Captured live session on a boot machine shows python3 present and running unittest successfully out of the box (python, without the 3 suffix, was not on PATH in that session).",
   "checked": "2026-09-30"
  },
  "usage_api": {
   "value": false,
   "source": "https://zipbox.ai/docs/pricing",
   "quote": "The Usage page has four tabs: Overview (including live burn rate and runway - hours until $0), Sandboxes (per-box machine time), LLM calls, and Provider calls. Use it to chase surprise charges after a heavy agent session.",
   "note": "granularity: account-only; cost: no; Zipbox provides usage tracking exclusively via a web dashboard (/usage page) that itemizes machine time per-box and LLM/API calls. No REST API, SDK call, or CLI command documented for programmatic access. Usage is visible only to the account holder via the web interface, not by resource tag or API endpoint.",
   "confidence": "high",
   "checked": "2026-10-01"
  },
  "persist_scope": {
   "value": "whole",
   "source": "https://zipbox.ai/docs/how-things-work",
   "quote": "Paused - the disk is archived and the meter stops ($0); Restore boots the same disk on fresh hardware",
   "note": "The whole disk survives a stop, installed packages included.",
   "checked": "2026-10-01"
  },
  "custom_image": {
   "value": false,
   "source": "https://zipbox.ai/docs/quick-start",
   "quote": "Everything else - machine size, a GitHub repository to clone, LLM billing, SSH keys - is on the same form, and the defaults are fine.",
   "note": "Create form offers name, agent, size, GitHub repo, LLM billing and SSH keys only; boxes boot from Zipbox's own pre-warmed image, with no user-supplied/custom image option documented (same basis as image_oci).",
   "checked": "2026-10-14"
  },
  "agent_harnesses": {
   "value": true,
   "source": "https://zipbox.ai/",
   "quote": "Pi, Claude Code, Codex, Grok, Muse Spark, Hermes, OpenClaw, opencode, Cline, Cursor CLI, Command Code, Amp and Herdr today, plus plain bash. Pick one at boot; each runs with its vendor’s own defaults.",
   "note": "13 harnesses selectable at boot (Herdr is a runtime that hosts other agents, per docs/get-started); Cursor CLI, Command Code and Amp use your own vendor account.",
   "checked": "2026-10-14"
  },
  "desktop": {
   "value": true,
   "source": "https://zipbox.ai/docs/skills",
   "quote": "zipbox-desktop Drives the box's X11 desktop - windows, mouse, keyboard - the same session you watch from the right rail.",
   "note": "Each box runs an X11 desktop (ZipOS: \"A web operating system with a browser, a file manager, ...\", homepage) streamed to the dashboard's right rail (\"the remote desktop\", docs/terminal-footer), which you can watch or take over; the agent drives it through the zipbox-desktop skill.",
   "checked": "2026-10-14"
  }
 },
 "locations": [],
 "locations_source": "https://zipbox.ai/docs/how-things-work",
 "locations_quote": "Each sandbox is a Firecracker microVM: a small virtual machine with its own Linux kernel, filesystem, public hostname, and network.",
 "locations_checked": "2026-10-01"
}