A portable open-source operating system for agents. ~6 ms coldstarts, 32x cheaper than sandboxes. Powered by WebAssembly and V8 isolates.
Works with
Pi
Claude Code*
Codex*
OpenCode*
Amp*
*Coming Soon
A new operating system architecture.
Built from the ground up for lightweight agents. agentOS provides the flexibility of Linux with lower overhead than sandboxes.
WebAssembly + V8 Isolates
High-performance virtualization without specialized infrastructure. The same battle-hardened isolation technology that powers Google Chrome.
Battle-tested technology
You're probably using this technology right now to view this page. Bring the same power to your agents. No VMs, no containers, no overhead.
Performance benchmarks
agentOS vs. traditional sandboxes.
Workload: Pi coding agent session with MCP servers and mounted file systems
Cold Startlower is better
0xfaster
agentOSWhat's measured: Time from requesting an execution to first code running. Why the gap: agentOS runs agents in-process — V8 isolates and Wasm inside your host. No VM to boot, no network hop, no disk image. Sandboxes must boot an entire environment, allocate memory, and establish a network connection before code can run. Sandbox baseline: agentOS: Median of 10,000 runs (100 iterations x 100 samples) on Intel i7-12700KF.
Fastest sandbox3,150 ms
Memory Per Instancelower is better
0xsmaller
agentOSWhat's measured: Memory footprint added per concurrent execution. Why the gap: In-process isolates share the host's memory. Each additional execution only adds its own heap and stack. Sandboxes allocate a dedicated environment with a minimum memory reservation, even if the code inside uses far less. Sandbox baseline: agentOS:
Cheapest sandbox~1024 MB
Sandboxes reserve idle RAM per agent.
Cost Per Execution-Secondlower is better
0xcheaper
agentOSWhat's measured: Why it's cheaper: Each execution uses Sandbox baseline: agentOS:server price per second / concurrent executions per server
Cheapest sandbox$0.000018/s
Assumes one agent per sandbox, needed for isolation.
Measured on Intel i7-12700KF. Cold start baseline: E2B, the fastest mainstream sandbox provider as of March 30, 2026. Cost baseline: Daytona, the cheapest mainstream sandbox provider as of March 30, 2026 (1 vCPU + 1 GiB default). Cost assumes 70% utilization on self-hosted hardware vs. per-second sandbox billing. Benchmark document
Meet your agent's new operating system.
Embed in your backend.
Your APIs. Your toolchains. No complex agent authentication needed. Just JavaScript functions or hooks.
Mount anything as a file system.
S3, SQLite, Google Drive, or the host file system. No per-agent credentials needed.
Agents think in files. agentOS lets you expose any storage backend as a familiar directory tree. The host handles credential scoping, so agents never see API keys or secrets.
Granular security.
Fully configurable network and file system security. Control rate limits, bandwidth limits, and file system permissions. Set precise CPU and memory limitations per agent.
Your laptop, your infra, or on-prem.
Railway, Vercel, Kubernetes, and more. Deploy wherever your code already runs.
agentOS is just an npm package. No vendor lock-in, no special infrastructure. Your agents run in your stack, on your terms.
RivetRailwayVercelKubernetesECSLambdaGoogle Cloud Run
Agents that just work.
Every agent deserves a runtime that understands it.
Infrastructure that disappears.
Deploy anywhere. Scale to anything. Forget about servers.
Orchestration without complexity.
Coordinate agents, humans, and systems out of the box.
Security without compromise.
The same isolation technology trusted by browsers worldwide.
Pairs with agentOS.
agentOS is where agents live. Secure Exec is how you safely run the code they generate. Sandbox Agent SDK is how you control coding agents over HTTP.
Secure Exec
Secure Node.js execution without a sandbox.
- V8 isolates with bridged Node APIs
- npm-compatible: fs, child_process, http
- 176x faster cold start than containers
- Just `npm install` — no Docker, no VMs
Sandbox Agent SDK
Run coding agents in sandboxes. Control them over HTTP.
- One interface for Claude Code, Codex, OpenCode, Amp
- Streams events, handles permissions, manages sessions
- Replay, audit, and retain full transcripts
- Swap agents with a config change
Left: Unix timesharing, UW-Madison, 1978. Right: "Data flock (digits)" by Philipp Schmitt, CC BY-SA 4.0
From humans to agents
The operating system is changing for the next generation of software operators.
Learn more