Rustbox#

Cloud runtime for executing untrusted code. Built for AI agents, coding platforms, and secure tool execution.

curl -s -X POST "https://api.rustbox.sh/api/submit?wait=true" \
  -H "Content-Type: application/json" \
  -H "X-API-Key: rb_live_your_key_here" \
  -d '{"language": "python", "code": "print(42)"}' | jq
{
  "id": "f2c6c5f7-1203-46e5-8a4f-a619c12bfeb0",
  "schema_version": "2.0",
  "language": "python",
  "profile": "judge",
  "status": "completed",
  "timestamps": {
    "created_at": "2026-04-03T08:05:23.540110+00:00",
    "started_at": "2026-04-03T08:05:23.540218+00:00",
    "completed_at": "2026-04-03T08:05:23.570195+00:00"
  },
  "result": {
    "verdict": "AC",
    "cause": "normal_exit",
    "actor": "runtime",
    "exit_code": 0,
    "signal": null,
    "error_message": null
  },
  "output": {
    "stdout": "42\n",
    "stderr": "",
    "integrity": "complete"
  },
  "metrics": {
    "cpu_time_secs": 0.009142,
    "wall_time_secs": 0.01,
    "memory_peak_bytes": 3862528,
    "cpu_wall_ratio": 0.9,
    "divergence": "cpu_bound"
  },
  "evidence": {
    "isolation": {
      "mode": "strict",
      "controls_applied": ["pid_namespace", "mount_namespace", "network_namespace", "memory_limit", "process_limit", "no_new_privileges"],
      "controls_missing": [],
      "proc_policy": "hardened",
      "sys_policy": "builtin-deny",
      "pidfd_mode": "native",
      "reason": "All configured controls applied"
    },
    "limits": {
      "rlimits": {
        "cpu_secs": { "soft": 4, "hard": 4 },
        "as_bytes": { "soft": 1073741824, "hard": 1073741824 },
        "nofile": { "soft": 32, "hard": 32 },
        "nproc": { "soft": 10, "hard": 10 }
      },
      "cgroup_backend": "cgroup_v2",
      "cgroup": {
        "memory_limit_bytes": 268435456,
        "memory_peak_bytes": 3862528,
        "oom_events": 0,
        "oom_kill_events": 0,
        "cpu_usage_usec": 9142,
        "process_count": 0,
        "process_limit": 10
      }
    },
    "teardown": {
      "reap_status": "clean",
      "descendant_containment": "ok",
      "zombie_count": 0,
      "cleanup_verified": true,
      "residual_mounts": [],
      "collection_errors": []
    }
  }
}

Replace rb_live_your_key_here with your actual API key. Request access to get one.

36ms median latency. 8 languages. Kernel-enforced isolation. Evidence-backed verdicts.


Why Rustbox#

RustboxTypical alternatives
Latency36ms cold start500ms+
Throughput148 executions/s~30/s
Isolation8 kernel layers, compile-time enforcedContainer defaults
Syscall filter51-rule seccomp deny-list300-rule generic defaults
VerdictsKernel evidence (OOM events, cgroup stats)Exit code guessing
IntegrationSingle API callMultiple services to orchestrate

Two profiles#

Judge - competitive programming, coding assessments. 256 MB memory, per-language time limits, no network access. Tight limits, fast verdicts.

Agent - LLM tool-calls, code interpreters, short-lived Python REPLs. 1 GB memory, 30 second wall time, filtered network.

Judge profile is live in the open beta. Agent profile is on the waitlist - request early access. Read more about profiles.

8 layers of isolation#

Every execution runs in a fresh sandbox with 8 independent security layers. Escape requires defeating all eight simultaneously.

#LayerStops
1PID + IPC + UTS namespacesSeeing host processes, IPC channels
2Mount namespace + chrootAccessing host filesystem
3Network namespaceSockets, DNS, cloud metadata
4Cgroups v2Memory bombs, fork bombs, CPU abuse
5Seccomp-BPF (51 rules)ptrace, mount, bpf, io_uring, kexec
6All capability sets zeroedPrivilege escalation
7Credential drop to unprivileged UIDRunning as root
8NO_NEW_PRIVSRegaining privileges via setuid

147 adversarial tests across all 8 languages. Fork bombs, memory bombs, chroot escapes, seccomp bypasses, privilege escalation attempts. 0 escapes across 22 attack vectors x 8 languages. Security details.

8 languages#

Python, C, C++, Java, JavaScript, TypeScript, Go, Rust. Full language reference.


Open beta - Request access to get your API key and start integrating today.

Quickstart - Get from API key to working integration in 5 minutes.

SDKs - TypeScript, Python, Go, Rust. One-line install.

API Reference - Full endpoint documentation.

Security - The 8-layer isolation model in detail.