llms.txt
+36 −8
− > kosa8 is secure infrastructure for AI agents. Every agent gets its own sealed machine: a real microVM with its own kernel, not a container sharing the host's. Save the whole running machine in about 0.7 seconds, rewind it in about a second, or fork it into live copies. It runs on your own hardware (Apple-silicon Macs, x86-64 Linux, Windows through WSL2), is Docker-compatible and MCP-native, and ships a Claude Code plugin.− - Pricing: commercial software with a 14-day free trial and no card. Plans from $29/month, priced by concurrent copies rather than seats. There is no permanently free tier.− - [kosa8 Cloud](https://cloud.kosa8.com/): hosted kosa8 sandboxes and functions; sign up, make an API key, call https://api.kosa8.com or the SDKs (`Kosa8Cloud`, `KOSA8_API_KEY`)− - [Run Claude Code with the brakes off, inside a sealed machine.](https://kosa8.com/use-cases/claude-code/): A Claude Code sandbox on your Mac or Linux box: Claude Code runs in its own microVM, sees one folder, reaches only listed hosts and never holds your API key.− - [Run Gemini CLI in a microVM on your Mac or Linux machine.](https://kosa8.com/use-cases/gemini-cli/): A Gemini CLI sandbox on your Mac or Linux machine: Gemini CLI runs in its own microVM, sees one folder, and your Gemini API key stays outside behind a broker.− - [AI agent sandbox options in 2026: the categories and how to choose](https://kosa8.com/alternatives/): AI agent sandboxes come as cloud services, self-hosted microVMs, local microVMs, containers and user-space kernels. What each is, and how to choose.− - [How do I give the OpenAI Agents SDK a local sandbox?](https://kosa8.com/guides/openai-agents-sdk-local-sandbox/): Use the SDK's DockerSandboxClient and set DOCKER_HOST to kosa8's socket: the sandbox becomes a container in a microVM on your own Mac or Linux machine.− - [Terms of service](https://kosa8.com/terms/): licence, trial, billing through Polar, refunds, acceptable use+ > kosa8 makes sealed sandboxes for AI coding agents: agents run code unattended, each in a sealed machine of its own, and on your own computer any mistake can be rewound. kosa8 Cloud runs sandboxes on kosa8's hosts, billed per second. Every sandbox is a real microVM with its own kernel, not a container sharing the host's. On your own hardware, save the whole running machine in about 0.7 seconds, rewind it in about a second, or fork it into live copies. Local sandboxes run on Apple-silicon Macs, + - Pricing: commercial software with a free tier after email sign-up (sandboxes, save and undo, dashboard). Forks, local models, Explore, the assistant and governance need a plan: from $29/month, priced by concurrent copies rather than seats, $30 off the first payment (card required at checkout). kosa8 Cloud gives $30 of credit once a card is on file. There is no time-limited trial.+ ## For AI agents+ - [AGENTS.md](https://kosa8.com/AGENTS.md): how an AI agent installs kosa8, signs the person up (they give the email and the code) and runs tasks in sandboxes+ - When kosa8 says it needs a plan: with `--json`, every refusal at a plan limit carries `upgrade: {plan, price_usd, url, command}`; relay it to the person, never buy for them (see AGENTS.md)+ - `kosa8 prompt "TASK"`: one task, one coding agent (Claude Code by default; codex, gemini, opencode, copilot), one sandbox that is removed afterwards+ - [Docs as markdown](https://docs.kosa8.com/llms.txt): every guide and command; add .md to any docs page address+ - [The whole manual in one file](https://docs.kosa8.com/llms-full.txt)+ - [kosa8 Cloud](https://app.kosa8.com/): hosted kosa8 sandboxes and functions; sign up, make an API key, call https://api.kosa8.com or the SDKs (`Kosa8Cloud`, `KOSA8_API_KEY`)+ - [Run Claude Code with the brakes off, inside a sealed machine.](https://kosa8.com/use-cases/claude-code/): A Claude Code sandbox on your Mac, Linux or Windows PC: Claude Code runs in its own microVM, sees one folder, reaches only listed hosts and never holds your API key.+ - [Run Gemini CLI in a microVM on your Mac, Linux or Windows machine.](https://kosa8.com/use-cases/gemini-cli/): A Gemini CLI sandbox on your Mac, Linux or Windows machine: Gemini CLI runs in its own microVM, sees one folder, and your Gemini API key stays outside behind a broker.+ - [AI agent sandbox for the enterprise](https://kosa8.com/ai-agent-sandbox/): One page on running AI agents safely at enterprise scale: a microVM per agent, closed network, keys kept outside, human approval, rewind, hash-chained audit; ten agent risks (prompt injection, exfiltration, secret theft, excessive agency and more) each with its control; every industry use case; cloud, self-hosted or air-gapped.+ - [kosa8 for security teams: contain what a hijacked agent can do](https://kosa8.com/security-teams/): For CISOs and AI security teams: a microVM per agent, keys and network rules on the host, checked tool calls with approvals, a signed audit log, SIEM forwarding, signed MCP policy, an offline evidence verifier and a cyber range.+ - [Control map: kosa8 against AI security frameworks (self-assessed)](https://kosa8.com/security-teams/frameworks/): kosa8 controls mapped to OWASP Top 10 for LLM Applications 2025, OWASP Top 10 for Agentic Applications, MITRE ATLAS, NIST AI RMF 1.0, EU AI Act Articles 12 and 15 and ISO/IEC 42001, gaps marked; self-assessed, not a certification.+ - [Best AI agent sandboxes in 2026](https://kosa8.com/alternatives/): eleven named options (E2B, Daytona, Modal, Vercel Sandbox, Cloudflare Sandboxes, Runloop, Northflank, Blaxel, Docker, Firecracker, kosa8) and the five kinds they fall into: cloud services, self-hosted microVMs, local microVMs, containers and user-space kernels+ - [E2B alternatives](https://kosa8.com/alternatives/e2b/): why teams leave E2B, and ten options with full comparisons+ - [Daytona alternatives](https://kosa8.com/alternatives/daytona/): why teams leave Daytona, and ten options with full comparisons+ - [Modal alternatives](https://kosa8.com/alternatives/modal/): why teams leave Modal, and ten options with full comparisons+ ## Comparisons+ Every fact about another product comes from that vendor's own docs or pricing page, checked on 2026-11-14 and cited on the page; "not documented" means the vendor's pages did not say. kosa8 has no SOC 2 report yet (in progress) and no GPU sandboxes.+ - [kosa8 vs other AI agent sandboxes](https://kosa8.com/vs/): every comparison, with isolation, self-hosting and fork at a glance+ - [kosa8 vs E2B](https://kosa8.com/vs/e2b/): E2B: Firecracker microVMs with fork, pause and five managed regions. kosa8: microVMs on your machines, air-gapped or kosa8 Cloud.+ - [kosa8 vs Daytona](https://kosa8.com/vs/daytona/): Daytona: containers by default, VM sandboxes with fork, GPUs, Windows and macOS. kosa8: a microVM every time, on your machines or kosa8 Cloud.+ - [kosa8 vs Modal](https://kosa8.com/vs/modal/): Modal: gVisor or VM sandboxes with GPUs in many regions. kosa8: microVMs on your machines or kosa8 Cloud, with live fork and rewind.+ - [kosa8 vs Vercel Sandbox](https://kosa8.com/vs/vercel-sandbox/): Vercel: Firecracker microVMs in 19 regions with a strong egress firewall. kosa8: microVMs anywhere you run them, with live fork and rewind.+ - [kosa8 vs Cloudflare Sandboxes](https://kosa8.com/vs/cloudflare-sandbox/): Cloudflare: Firecracker-backed containers started from a Durable Object across its network. kosa8: microVMs on your machines or kosa8 Cloud.+ - [kosa8 vs Runloop](https://kosa8.com/vs/runloop/): Runloop: managed VM devboxes, deploy into your AWS, GCP or Azure account. kosa8: microVMs you run anywhere, saving memory as well as disk.+ - [kosa8 vs Northflank](https://kosa8.com/vs/northflank/): Northflank: a full platform with microVM and gVisor sandboxes, 17 regions, wide BYOC and GPUs. kosa8: microVMs with live fork and rewind.+ - [kosa8 vs Blaxel](https://kosa8.com/vs/blaxel/): Blaxel: microVMs that sleep and resume in under 25 ms, with memory fork in preview. kosa8: microVMs on your machines, air-gapped or kosa8 Cloud.+ - [kosa8 vs Docker](https://kosa8.com/vs/docker/): Docker: containers share the host kernel; Docker Sandboxes put agents in local microVMs. kosa8: microVMs with rewind, fork and audit.+ - [kosa8 vs Firecracker](https://kosa8.com/vs/firecracker/): Firecracker: the Apache-2.0 VMM behind AWS Lambda, which you build a platform around. kosa8: a finished sandbox product with network, keys, audit and rewind.+ - [How do I give the OpenAI Agents SDK a local sandbox?](https://kosa8.com/guides/openai-agents-sdk-local-sandbox/): Use the SDK's DockerSandboxClient and set DOCKER_HOST to kosa8's socket: the sandbox becomes a container in a microVM on your own Mac, Linux or Windows machine.+ - [Refer and earn guide](https://docs.kosa8.com/guides/refer/): where to find your referral link, the referral and affiliate rules, and the API+ - [Terms of service](https://kosa8.com/terms/): licence, free tier, billing through Polar, refunds, acceptable use+ - [Refer and earn](https://kosa8.com/refer/): give $30, get $30 of kosa8 Cloud credit at the invited team's first payment of $25 or more; 30-day hold, $500 a year cap+ - [Affiliate program](https://kosa8.com/affiliates/): 20% of licence and Cloud plan or usage payments for 12 months (not credit packs), approved by hand; payable after a 60-day hold, paid monthly by PayPal or Wise from $50 once a tax form is on file; disclosure required, no brand-keyword bidding