Agent Sandboxes
Own the machines your agents run on.
The sandbox service behind Engine, available standalone. Deploy it on-prem or in your cloud and give every agent an isolated Windows, Linux, or macOS machine with snapshots, network policy, and full session recording.
Three operating systems
Windows, Linux, and macOS sandboxes from one API, for agents that operate real desktop and server software.
Your infrastructure
Runs on-prem or in your VPC. Machine images, data, and traffic never leave your perimeter.
Snapshot and restore
Checkpoint a machine mid-task, branch it, or roll it back. Reproduce any run from its snapshot.
Network policy per sandbox
Default-deny egress with allowlists per workflow, so an agent reaches exactly what its task requires.
Session recording
Full video and input capture of every session, tied to the run's trace for review and audit.
Agent Sandboxes is part of the Context platform and works best with Engine. It deploys standalone, and everything it captures joins the same context graph, evals, and audit trail.