Vercel Sandbox
Secure, isolated environments for running code.
A Vercel service and SDK for creating secure, isolated Linux execution environments for running code and AI agents, with programmatic filesystem, command, and network controls.
Recent stories
Vercel reports that its sandbox escape challenge uncovered a Linux kernel zero-day. The program received 1,285 submissions and paid $242,000 in bounties, with no customer data compromise reported.
Zeeg describes a harness using ephemeral Vercel sandboxes with egress controls and separately stored state. Follow-up discussion covers replayable state, credentials, isolation and parallel execution.
Vercel launched an open security challenge for escapes from its Firecracker-based Sandbox and bypasses of its host-side network boundary. Individual rewards can reach $50,000, and Vercel says researchers may test any model in the challenge.
Vercel shipped FUSE-based Sandbox mounts for S3 and network filesystems and opened Agent Runs through MCP and CLI. Use it to connect remote state, sandbox execution, and agent-readable Eve traces for self-improving workflows.