Cloud primitive - verified
Cloudflare Sandboxes (Containers and Dynamic Workers)
Cloudflare Sandboxes (Containers and Dynamic Workers) is a cloud primitive from Cloudflare, read from its own pages on October 18, 2026. Isolation: Containers: microVM per instance with own kernel and network. Status: Public beta for the sandbox container scheduling policy. 5 price rows, each in Cloudflare Sandboxes (Containers and Dynamic Workers)'s own unit.
Vendor: Cloudflare. Docs: developers.cloudflare.com. Pricing: developers.cloudflare.com. Compare every agent sandbox
- Price rows
- 5
- Vendor claims
- 0
- Not stated
- 5
- Verified quotes
- 17
Pricing
In the provider's own unit, verbatim. Nothing is converted; the directory compares a price only with others in the same unit.
| Price | Unit, as stated | Quote and source | Notes |
|---|---|---|---|
| $5 | per month, Workers Paid plan (required; includes monthly usage)Directory block: Per month | “with included monthly usage as part of the $5 USD per month Workers Paid plan” | - |
| $0.000020 | per additional vCPU-second (after 375 vCPU-minutes/month)Directory block: Per vCPU-second | “375 vCPU-minutes/month + $0.000020 per additional vCPU-second” | CPU billed on active usage. |
| $0.0000025 | per additional GiB-second memory (after 25 GiB-hours/month)Directory block: Per GiB-second | “25 GiB-hours/month included +$0.0000025 per additional GiB-second” | Memory billed on provisioned instance size. |
| $0.00000007 | per additional GB-second disk (after 200 GB-hours/month)Directory block: Per GB-second | “200 GB-hours/month +$0.00000007 per additional GB-second” | - |
| $0.025 | per GB egress, North America and Europe (1 TB/month included)Directory block: Per GB | “North America & Europe · $0.025 · 1 TB” | - |
- Free tier or credits
Not on Free plan; Sandbox requires Workers Paid
“Available on Workers Paid plan”
developers.cloudflare.com
Limits, lifecycle and isolation
- Max session duration
- Not stated
Note: No maximum runtime stated in checked pages; instances stop on inactivity timeout, destroy(), or main-process exit.
- Idle timeout and auto-pause
Instance stops when its inactivity timeout ends (code running inside does not count as activity)
“If no requests arrive, the instance stops when the inactivity timeout ends, even while a build, a test suite, or an agent task still runs inside it.”
developers.cloudflare.com - Persistence and snapshots
Container snapshots (public beta) save the writable root filesystem, not memory or processes
“snapshotContainer() saves the writable root filesystem of a running instance. It does not save separately mounted filesystems, memory, or processes.”
developers.cloudflare.com Snapshots in public beta
“Container snapshots are in public beta. The API and behavior may change.”
developers.cloudflare.com - Isolation
Containers: microVM per instance with own kernel and network
“Each instance is a microVM with its own kernel and network, so no other workload shares it.”
developers.cloudflare.com Dynamic Workers: separate Worker in the Workers runtime (JavaScript, Python, WebAssembly)
“The Workers runtime runs each Dynamic Worker apart from your Worker and from other Dynamic Workers.”
developers.cloudflare.com - CPU and memory limits
Largest listed instance type standard-4: 4 vCPU, 12 GiB, 20 GB disk
“standard-4 · 4 · 12 GiB · 20 GB”
developers.cloudflare.com - GPU
- Not stated
Note: Not stated in checked pages.
- Egress controls
Worker decides whether sandbox code can reach the public Internet (enableInternet flag; outbound interception)
“Your Worker decides which application APIs and data the code receives, and whether the code can reach the public Internet.”
developers.cloudflare.com - SDKs and languages
Driven from a Cloudflare Worker (JavaScript/TypeScript); container can run any language
“The instance is a full Linux environment, so you can run any language and keep processes running.”
developers.cloudflare.com - Regions
- Not stated
Note: Not stated in checked pages (egress pricing is by region group only).
- Open source
- Not stated
Note: Not checked.
- Self-host or BYOC
- Not stated
Note: Not stated in checked pages.
- Status
Public beta for the sandbox container scheduling policy (stated)
“A sandbox container uses the Durable Object scheduling policy, which is in public beta.”
Status stated - developers.cloudflare.com
Other facts
Billed per 10 ms of active running
“Containers are billed for every 10ms that they are actively running”
developers.cloudflare.com Workers and Durable Objects usage billed in addition
“You are billed for your usage of both Workers and Durable Objects.”
developers.cloudflare.com
FAQ
How much does Cloudflare Sandboxes (Containers and Dynamic Workers) cost?
$5 per month, Workers Paid plan (required; includes monthly usage); $0.000020 per additional vCPU-second (after 375 vCPU-minutes/month); $0.0000025 per additional GiB-second memory (after 25 GiB-hours/month); $0.00000007 per additional GB-second disk (after 200 GB-hours/month); $0.025 per GB egress, North America and Europe (1 TB/month included). Prices are in the provider's own units as of October 18, 2026. Free tier: Not on Free plan; Sandbox requires Workers Paid.
What isolation does Cloudflare Sandboxes (Containers and Dynamic Workers) use?
Containers: microVM per instance with own kernel and network; Dynamic Workers: separate Worker in the Workers runtime (JavaScript, Python, WebAssembly).
How long can a session run on Cloudflare Sandboxes (Containers and Dynamic Workers)?
Not stated. No maximum runtime stated in checked pages; instances stop on inactivity timeout, destroy(), or main-process exit. Idle behavior: Instance stops when its inactivity timeout ends (code running inside does not count as activity).
Does Cloudflare Sandboxes (Containers and Dynamic Workers) restrict outbound network access?
Worker decides whether sandbox code can reach the public Internet (enableInternet flag; outbound interception).
Sources
Last verified from each provider's own docs, pricing pages and repositories; every quote was string-matched against the page that day. Not a benchmark: prices are in the provider's own unit and change without notice, so check the linked source before you commit.
Newsletter
Know when agent infrastructure changes
One email per week. New model releases, agent tooling and what they mean for what you build.