embeddable · stateful · snapshots · hardware isolationembeddable · stateful · snapshots
Sandboxes for
every agent
The SQLite of sandboxing — embeddable, stateful micro-VMs with snapshots and hardware isolation. Just import and run.
features
Built for developers
who need control
Everything you need to run untrusted code safely.
Embeddable
The SQLite of sandboxing. A single importable library — no cloud accounts, no daemons, no root. Just import and run.
Stateful
Environments persist across sessions. Install packages, create files, configure once — come back hours later and everything is still there.
Snapshots
Checkpoint before risky operations, rollback instantly. Fork environments for parallel exploration. Clone identical sandboxes for batch processing.
Hardware Isolation
Each sandbox runs in its own micro-VM with a dedicated Linux kernel. Not containers — true hardware-level isolation via KVM or Hypervisor.framework.
sdk
Three lines to sandbox
Native support for Python, Node.js, and Rust.
import asyncio
import boxlite
async def main():
async with boxlite.SimpleBox(image="python:slim") as box:
# Execute code safely
result = await box.exec("python", "-c", "print(2 + 2)")
print(result.stdout) # "4"
# Install packages persistently
await box.exec("pip", "install", "numpy")
result = await box.exec(
"python", "-c",
"import numpy as np; print(np.random.rand(3))"
)
print(result.stdout)
asyncio.run(main())architecture
How it works
BoxLite runs real microVMs on your machine — each with its own Linux kernel.
comparison
Local vs Cloud
Keep your data local. Skip the cloud bill.
use cases
One runtime, every workload
From AI agents to browser automation — one sandbox runtime for everything.
AI Agent Sandboxing
Hardware-isolated micro-VMs keep untrusted code fully contained. Checkpoint before risky operations, rollback on failure — agents can explore fearlessly.
Code Execution
Persistent state across sessions means packages and files survive restarts. Fork snapshots for parallel exploration — perfect for notebooks, REPLs, and build systems.
Browser Automation
Just import the library and run — each automation task gets its own micro-VM with a dedicated kernel, network isolation, and resource limits.