Hacker News Reader

Looks like you are running tools/browser in the same VM. How safe is this? Do you see contention for ports/resources? How does it compare to offerings from other sandboxing providers?

View on HN

So as a user you have the choice of running tools/browsers etc. in the same VM. We don't currently offer a separate browser specific VM, but it really is upto the user on what they bundle into a sandbox.

Compared to any other sandbox provider I'm aware of agent37 is an order of magnitude better in price/performance ratio for any given task.

Got it. I meant how this design compare to other sandboxing providers. For example, ephemeral sandboxes (e.g., E2B) where you spin up a clean VM for every tool call can reduce the blast radius, but maybe inefficient.

Reply on news.ycombinator.com