Run CloudRun CloudGet access

Sandbox comparison · Reviewed July 2026

Cloudflare Sandboxvs Run Cloud

Cloudflare Sandbox exposes container execution to Workers applications with sessions and configurable sleep behavior. Run Cloud provides hardware-isolated microVMs and a multi-product agent runtime.

Cloudflare Sandbox

What it does well

  • Direct integration with Workers, Durable Objects, and the Cloudflare developer platform.
  • TypeScript SDK with command execution, files, sessions, and configurable sleep behavior.
  • A natural option for applications already centered on Cloudflare bindings and deployment.

Run Cloud

Why teams compare

  • Hardware-isolated Linux microVMs with snapshot, fork, pause, and resume.
  • Browser-controlled iOS simulators on the same product surface.
  • A Cloudflare Sandbox-shaped compatibility adapter for incremental migration.

Detailed comparison

Different control planes. A practical migration path.

This comparison focuses on architecture and workflow rather than temporary prices or benchmark claims.

AreaCloudflare SandboxRun Cloud
Runtime modelCloudflare containers exposed through the Sandbox SDK and coordinated from Workers.KVM-backed Firecracker microVMs with a dedicated kernel and filesystem.
StateExplicit sessions preserve shell state; containers sleep after inactivity.Snapshot, fork, pause, and resume preserve and branch agent environments.
SDK shapeTypeScript-first @cloudflare/sandbox API used with Workers bindings.Native APIs plus a Cloudflare-shaped TypeScript compatibility adapter.
Platform scopeTightly integrated with Workers and Cloudflare application infrastructure.Standalone agent compute with iOS simulator and Xcode build products.
Migration pathExisting code imports Sandbox from @cloudflare/sandbox.Change the import to @run-cloud/sdk/compat/cloudflare and replace binding-specific setup.

Provider details were reviewed against the Cloudflare Sandbox SDK documentation. Product capabilities change; validate requirements against current vendor documentation.

Choose Cloudflare Sandbox

Stay when its platform is the advantage.

  • Workers applications that want sandbox calls close to existing Durable Object state.
  • Teams standardized on Cloudflare deployment, bindings, observability, and security controls.
  • Container workloads that fit the Sandbox SDK lifecycle and platform limits.

Choose Run Cloud

Move when the agent needs more than Linux.

  • Workloads that explicitly require a dedicated-kernel microVM boundary.
  • Teams migrating Cloudflare-shaped Sandbox calls into a provider-independent runtime.
  • Agents that need Linux execution plus browser-based iOS and Xcode infrastructure.

Compatibility layer

Start with the import.

Keep the provider-shaped entry point while you validate lifecycle, network, image, and storage behavior against your application.

@run-cloud/sdk/compat/cloudflare
sandbox.ts
Beforeimport { Sandbox } from "@cloudflare/sandbox";
Run Cloudimport { Sandbox } from "@run-cloud/sdk/compat/cloudflare";

FAQ

Cloudflare Sandbox migration questions.

Is Cloudflare Sandbox a container or a microVM?+

Cloudflare documents Sandbox as a container-based product integrated with its developer platform. Run Cloud describes its Linux runtime as KVM-backed Firecracker microVMs with a dedicated kernel.

Can Workers code migrate to Run Cloud?+

The compatibility adapter preserves a Cloudflare-shaped Sandbox import, but Workers bindings and Durable Object coordination are Cloudflare-specific and need replacement at the application boundary.

When is Cloudflare Sandbox the better fit?+

It is a natural fit when your control plane already runs on Workers and you want sandbox execution integrated with Cloudflare bindings and operations.

Why choose Run Cloud?+

Run Cloud is useful when you want a standalone microVM runtime or need the same agent platform to provide iOS simulators and cloud Xcode builds.

Test the migration on a real workload.

Bring one sandbox workflow, keep the familiar API shape, and measure the behavior that matters to your agents.

Get early access