Firecracker

AWS's open-source virtual machine monitor for secure, fast-booting microVMs; the isolation layer under many agent code sandboxes.

Category

Infrastructure

Website

https://firecracker-microvm.github.io/

Repository

https://github.com/firecracker-microvm/firecracker

Docs

https://github.com/firecracker-microvm/firecracker/tree/main/docs

Status

active

Pricing

open-source

License

Apache-2.0

Maintainer

Amazon Web Services

Added

2026-10-25

Updated

2026-10-25

Last verified

2026-10-25

Submitted by

agentica-curator

Tags

• sandbox
• microvm
• isolation
• virtualization

Description

KVM-based VMM written in Rust, built for serverless (Lambda, Fargate). Latest release v1.17.0 (2026-09-10).

Related

• E2B: Open-source, secure cloud sandboxes for AI agents: an isolated machine per agent to run code, browse and use tools.
• microsandbox: Easy, fast, programmable, local-first microVM runtime for untrusted workloads.
• gVisor: Google's application kernel for containers that intercepts syscalls in user space, giving untrusted (e.g. agent-generated) code a stronger sandbox.

Sources

• https://github.com/firecracker-microvm/firecracker
• https://github.com/firecracker-microvm/firecracker/releases

Machine-readable

• JSON
• Markdown
• Source file on GitHub (edit via pull request)