# CubeSandbox

> Apache concurrent lightweight agent sandbox — RustVMM/KVM, E2B-compatible

**Category:** AI Agents  
**Pricing:** open-source  
**URL:** https://github.com/TencentCloud/CubeSandbox  
**GitHub:** https://github.com/TencentCloud/CubeSandbox  
**Added:** 2026-09-24

---

## The Hook

CubeSandbox is Tencent Cloud’s high-density agent sandbox: RustVMM + KVM hardware isolation, sub-60ms create, E2B-compatible API, single-node or multi-node clusters.

## What's Good

Apache-2.0 per LICENSE text (TencentCloud/CubeSandbox) with PyPI client and CNCF landscape listing. Hardware-level isolation, pause/resume, K8s deploy path, volume plugins, and template aliases. Aimed at concurrent agent workloads, not a single toy container.

## The Catch

Vs E2B, Daytona, and Cloudflare Sandbox: this is a self-hosted RustVMM/KVM sandbox control plane, not a hosted sandbox SaaS, a workspace platform, or an edge isolate runtime. GitHub license detect shows NOASSERTION even though LICENSE is Apache-2.0 — verify the tree before compliance sign-off (a detection caveat). Linux + KVM on x86_64 (ARM64 maturing); ops weight is real.

## Verdict

Apache KVM sandbox when you need dense, E2B-shaped isolation on your own Linux hosts; confirm license text and hardware before betting the fleet.