⚡Stack Radar

Agent Sandboxes · Reviewed 24 Oct 2026

Cloudflare Sandboxes

Secure code execution for AI agents and developer tools.

from $5 · free tier · cloudflare.com ↗

Paid against free › Agent Sandboxes › Cloudflare Sandboxes

Cloudflare Sandboxes at a glance
63.5MEstimated total trafficModeled monthly visits110.7KRanking keywordsPublic search sample95/100Technical health15 pages checked623.2KReferring domainsLive backlink summary

Overview

01

Summary

The useful answer before the supporting detail.

Cloudflare Sandboxes is a secure code execution service for AI agents and developer tools, designed to run untrusted code safely S7. It solves the problem of executing user-submitted Python or JavaScript in a contained environment with automatic output parsing S7. Built on Cloudflare Containers, it offers global placement and pay-per-use pricing S7.

02

Product identity and positioning

Name, category, positioning, audience, and first-party claims.

  • Identity: Cloudflare Sandboxes, a secure code execution service by Cloudflare S7.
  • Core purpose: Provides secure code execution for AI agents, developer tooling, and untrusted code S7.
  • Intended users: Developers building AI agents and developer tools that need to run code safely S7.
  • Product scope: A standalone service built on Cloudflare Containers, distinct from other Cloudflare products S7.
  • Positioning: Positioned as secure code execution for AI agents and developer tools S7.
  • Claimed distinction: Each sandbox runs in its own secure container S7.
03

Use cases and audiences

Who the product serves and the jobs it is designed to handle.

AudiencePractical use case
AI agent developersRun untrusted AI-generated code securely S7.
Developer tool buildersProvide sandboxed dev environments for testing and CI/CD S7.
Platform engineersExecute code from workers with automatic output parsing for rich content S7.

Features

09

Features and capabilities

Core functions and evidence-backed product capabilities.

CapabilityWhat it does
Secure sandboxesEach sandbox runs in its own secure container for isolation S7.
Run codeRun Python or JavaScript directly with `runCode()` and automatic output parsing S7.
SDK-driven controlImport `@cloudflare/sandbox` to manage the sandbox lifecycle from a Worker S7.
Filesystem managementRead, write, and organize files within the sandbox filesystem S7.
Dev environmentsSpin up complete dev environments on-demand for testing, CI/CD, or collaborative coding S7.
Repo and command executionClone repos and execute shell commands via simple async methods S7.
10

Integrations and ecosystem

Connected products, exports, APIs, and workflow compatibility.

Integration or interfaceTypeWhat it enables
@cloudflare/sandboxSDKManage the entire sandbox lifecycle from a Worker S7.
Cloudflare ContainersPlatformProvides global placement and automatic scaling for sandboxes S7.
WorkersIntegrationSandboxes run on Cloudflare Containers and integrate with Workers S27 S7.

Pricing

11

Pricing and plans

Published plans, free access, trials, credits, and pricing limitations.

Plan or offerVerified price and billingIncludedLimits
Workers Paid$5 per month plus usage S1375 vCPU-minutes, 25 GiB-hours memory, 200 GB-hours disk per month S1Additional usage billed per 10 ms; egress $0.025/GB after 1 TB S1
Usage-based$0.000020 per vCPU-second, $0.0000025 per GiB-second, $0.00000007 per GB-second of disk S7Not establishedNot established

Competition

12

Competitive landscape

Domains competing for the same organic search demand.

Sampled competitors

CompetitorFirst-page appearancesSampled queriesAverage positionQueries observed
github.com215.5499 status code
resultfirst.com111499 status code
thundercattech.com1112fa example
learn.microsoft.com112499 status code
odown.com113499 status code
oloid.com1132fa example
http.dev114499 status code
brainstation.io1142fa example
youtube.com1152fa example
browserscan.net1162fa example

Website intelligence — Collected evidence

Customers, testimonials, and first-party review claims

No supporting public-page evidence was collected for this category.

Independent review sources discovered

No links to supported independent review platforms were discovered on the collected pages.

14

AI visibility

Measured ChatGPT and Google AI mentions with cited sources.

AI-assistant referral traffic

  • Estimated current generative-AI referral share: 2.1%
MonthSource
—All AI assistants
—All AI assistants
—All AI assistants

Website intelligence — Collected evidence

Site-stated AI capabilities

Page typeEvidenceSource
featuresSee solutionhttps://www.cloudflare.com/solutions/
featuresSee solutionhttps://www.cloudflare.com/solutions/
featuresAI agents are already searching, browsing, and buying on behalf of real customers. Cloudflare gives you one platform to control which agents discover your store, serve your catalog in formats they understand, and enable secure agentic payments — all at the edge, across 335+ cities.https://www.cloudflare.com/solutions/agentic-commerce/
featuresGet found, safely. Be discoverable to legitimate AI agents shopping on behalf of real customers. Cryptographically verify trusted agents with Web Bot Auth — welcome the right ones, block the rest.https://www.cloudflare.com/solutions/agentic-commerce/
featuresShip a shopping assistant in minutes with the Agents SDK on Workers — stateful, globally distributed, zero infrastructure. Route models through AI Gateway for caching and spend control, and orchestrate multi-step checkouts with Workflows.https://www.cloudflare.com/solutions/agentic-commerce/
features[](/solutions/ai/)https://www.cloudflare.com/solutions/
featuresBuild intelligent applications with AI at the edgehttps://www.cloudflare.com/solutions/
featuresSee solutionhttps://www.cloudflare.com/solutions/
features[](/solutions/ai-security/)https://www.cloudflare.com/solutions/
featuresAI Securityhttps://www.cloudflare.com/solutions/
featuresSecure and control AI adoption without slowing innovation.https://www.cloudflare.com/solutions/
featuresSee solutionhttps://www.cloudflare.com/solutions/
featuresAI agents are already searching, browsing, and buying on behalf of real customers. Cloudflare gives you one platform to control which agents discover your store, serve your catalog in formats they understand, and enable secure agentic payments — all at the edge, across 335+ cities.https://www.cloudflare.com/solutions/agentic-commerce/

These are first-party product claims, not independent measurements of AI-search visibility.

15

Marketing opportunities

Actions calculated directly from the collected evidence.

OpportunityRecommended actionEvidence
Competitor gapReview the sampled queries where github.com appears.2 first-page appearances across 499 status code

Website intelligence — Collected evidence

Website evidence gaps

  • integrations: no usable public page was collected; verify whether the site publishes this evidence.
  • customers: no usable public page was collected; verify whether the site publishes this evidence.
  • reviews: no usable public page was collected; verify whether the site publishes this evidence.
  • changes: no usable public page was collected; verify whether the site publishes this evidence.
  • identity: no usable public page was collected; verify whether the site publishes this evidence.
  • technical: no usable public page was collected; verify whether the site publishes this evidence.

Trust and proof

16

Customers, proof, and reviews

Published proof, customer signals, and review evidence.

Independent reviews

No citation-grounded independent review links were found.

Customer proof

No named customers, testimonials, or customer case studies were found.

Independent mentions

  • cloudflare/sandbox-sdk — Run untrusted or generated code in a Linux sandbox that belongs to one user, task, or session. Your Worker decides who gets a sandbox, which hosts it can reach, and which credentials stay out of it. ... is a Durable Object and the Container it starts. The
  • Cloudflare Sandboxes - Secure Code Execution — Cloudflare Sandboxes - Secure Code Execution ... ### Run untrusted code in isolated environments. Give your AI agents, code interpreters, and developer tools a secure place to execute code, install packages, and interact with the filesystem. ... Fully isolated Each sandbox runs in its own secure container. Execute AI-generated or user-submitted code with zero risk to your infrastructure. ... ### SDK-driven control ... Import `@cloudflare/sandbox` and manage the entire sandbox lifecycle from your
  • Sandbox security · Cloudflare Sandboxes docs — A sandbox runs code you do not trust, such as code that a model generates, a user writes, or a dependency brings in. Cloudflare isolates the sandbox from your Worker and from other sandboxes. For more information about that isolation, refer to Sandboxes on Cloudflare. ... Isolation does not limit what the code does inside its own sandbox. Assume that the code uses everything it can reach there, including the files, credentials, and network access that your Worker provides. ... The sandbox is the
  • Architecture · Cloudflare Sandbox SDK docs — SDK lets you execute untrusted code safely from your Workers. It combines three Cloudflare technologies to provide secure, stateful, and isolated execution: ... SDK - Durable Objects - Persistent sandbox instances with unique identities - Containers -
  • Agents have their own computers with Sandboxes GA / Cloudflare Blog — Sandboxes solve this by injecting credentials at the network layer using a programmable egress proxy. This means that sandbox agents never have access to credentials and you can fully customize auth logic as you see fit:
  • Container runtime · Cloudflare Sandbox SDK docs — sandboxes (isolated): - Each sandbox is a separate container - Filesystem, memory and network are all ... Within sandbox (shared): - All processes see the same files - Processes can communicate with each other - Environment variables are session-scoped
  • Use code interpreter · Cloudflare Sandbox SDK docs — - Quick code execution - Run Python/JS code without environment setup - Rich outputs - Get charts, tables, images, HTML automatically - AI-generated code - Execute LLM-generated code with structured results
  • Run AI-generated code on-demand with Code Sandboxes (new) · Changelog — new) AI is supercharging app development for everyone, but we need a safe way to run untrusted, LLM-written code. We’re introducing Sandboxes ↗︎, which let your Worker run actual processes in a secure, container-based environment.

External links were grounded in one live web search. Search snippets are leads, not independently scraped page content; rejected links remain available in Review evidence.

17

Company, security, and trust

Ownership, policies, security signals, and public trust evidence.

SignalFindingSource
Company and ownershipWhere Cloudflare was founded in 2009 — and where it all started.source
Contact and supportPhone, chat, ticket; professional services available (add-on)source
Legal and privacyPress enter or space to select a node. You can then use the arrow keys to move the node around. Press delete to remove it and escape to cancel.source
Security and complianceSingle-Sign-On (SSO) Supportsource
Uptime and status pageUptime Service Creditssource
Domain registered2009-02-17—
Domain expires2033-02-17—

Every trust signal above is backed by a collected page or a registration record.

18

Documentation and product updates

Help resources, product guidance, and visible changes over time.

Not established in the collected sources.

Technical

19

Technical and delivery signals

Delivery model, platforms, API, data ownership, reliability claims and release activity.

SignalFindingSource
Delivery modelCloud service, built on Cloudflare Containers S7.
Platforms and appsWeb-based, run on Cloudflare's global network S7.
API and extensibilityProvides an SDK for lifecycle management and API access S7.
Data ownership and exportNot published on the collected pages.—
Performance and reliability claimsSandboxes start in milliseconds S7.
Release activityNot published on the collected pages.—
20

Measured infrastructure

Domain, certificate, and hosting signals, measured directly.

SignalFinding
Domain registered2009-02-17 — Cloudflare, Inc.
Domain expires2033-02-17
TLS certificateGoogle Trust Services, valid, expires 2026-12-04
Security headersHSTS, CSP, X-Content-Type-Options, X-Frame-Options, Referrer-Policy
Server headercloudflare
Mail handled bymxb-canary.global.inbound.cf-emailsecurity.net, mxa-canary.global.inbound.cf-emailsecurity.net
Nameserversns4.cloudflare.com, ns5.cloudflare.com

Not measurable: wayback: rate limited by archive.org, ladder stopped after 1 probe(s). A gap here means the lookup was unavailable, not that the finding is negative.

21

Technical site audit

A bounded multi-page crawl with page-level issues and URLs.

Scout — Bounded technical crawl

  • Pages crawled: 15 of 15 maximum
  • Technical health: 95/100
  • Critical issues: 0
  • Warnings: 16
  • Notices: 1

Issues

SeverityIssueValueAffected URL
warningPage should have one primary H12https://www.cloudflare.com/
warningPage should have one primary H12https://www.cloudflare.com/
warningTitle length should be reviewed7https://www.cloudflare.com/plans/
warningPage should have one primary H12https://www.cloudflare.com/plans/
warningTitle length should be reviewed7https://www.cloudflare.com/plans/
warningPage should have one primary H12https://www.cloudflare.com/plans/
noticeMeta description length should be reviewed186https://www.cloudflare.com/partners/
warningPage should have one primary H10https://www.cloudflare.com/startups/
warningPage should have one primary H12https://www.cloudflare.com/about/
warningDuplicate title in audit sample2https://www.cloudflare.com/
warningDuplicate title in audit sample2https://www.cloudflare.com/
warningDuplicate title in audit sample2https://www.cloudflare.com/plans/
warningDuplicate title in audit sample2https://www.cloudflare.com/plans/
warningDuplicate meta description in audit sample2https://www.cloudflare.com/
warningDuplicate meta description in audit sample2https://www.cloudflare.com/
warningDuplicate meta description in audit sample2https://www.cloudflare.com/plans/
warningDuplicate meta description in audit sample2https://www.cloudflare.com/plans/

Crawled pages

StatusTitleH1sWordsResponseURL
200Cloudflare: Build for the agent era21143305 mshttps://www.cloudflare.com/
200Cloudflare: Build for the agent era21143130 mshttps://www.cloudflare.com/
200Products \Cloudflare1543372 ms
200Solutions \Cloudflare1306577 ms
200Resources \Cloudflare1376388 ms
200Pricing22842336 mshttps://www.cloudflare.com/plans/
200Website Under Attack? \24/7 Emergency Support1546293 ms
200Contact Enterprise Sales — Cloudflare1779370 mshttps://www.cloudflare.com/resource/contact-enterprise-sales/
200Pricing22842348 mshttps://www.cloudflare.com/plans/
200Partners \Cloudflare1748281 ms
200Startup Program \Cloudflare01858265 ms
200Cloudflare Registrar - Search and Buy Domains at Cost1678100 mshttps://www.cloudflare.com/domains/
200About us \Cloudflare2817229 ms
200Cloudflare Careers \Cloudflare1943126 ms
200Press Overview \Cloudflare1406249 ms

This is a bounded Scout crawl. Core Web Vitals and Lighthouse scores are not claimed unless a dedicated performance audit is connected.

22

Search Console and Analytics

First-party search and behavioral data connection state.

Modeled acquisition channels

ChannelEstimated share
direct66.6%
search18.5%
search organic17.6%
search paid0.9%
social4.0%
social organic3.6%
social paid0.4%
referrals5.8%
paid referrals1.1%
mail1.9%
gen ai2.1%
affiliate0.0%
other0.0%

First-party connections

IntegrationStatusData available after connection
Google Search ConsoleNot connectedClicks, impressions, CTR, average position, queries, pages, countries, and devices
Google AnalyticsNot connectedOrganic sessions, engagement, landing pages, conversions, geography, and devices

No first-party Search Console or Analytics numbers are shown until the site owner authorizes the corresponding Google account. Scout traffic model values above are modeled estimates, not private analytics totals.

Limits and method

23

Limitations and open questions

Known constraints and missing evidence from the collected pages.

The collected pages do not mention specific competitors. Pricing details for Sandboxes are limited; the product relies on the Workers Paid plan and usage-based charges S1. There is no documentation of a free tier or trial for Sandboxes S1.

24

Sources, method, and limitations

Evidence inventory, collection method, provider use, and constraints.

This report is based on 15 collected pages from cloudflare.com, including product pages and about pages. External proof search was limited to verifying web search results; no external content was scraped. The evidence catalog covers only public-facing pages, and pricing was verified via the authoritative pricing table from developers.cloudflare.com.

Paid against free, in your inbox

One job at a time: the paid tools worth paying for, the free ones you can run yourself, and who should pick which.

No tracking pixels. One click to leave. We use your address to send Stack Radar and nothing else. Privacy.