Compare · Agent sandboxes · verified 17 Oct 2026

Cloudflare Sandbox vs Vercel Sandbox

Two platform sandboxes, each next to its own platform: Cloudflare's runs beside Workers and Durable Objects, Vercel's beside Vercel projects.

Facts checked 17 October 2026. Prices and limits move. Read the citations.

Start a TaskAll comparison pages
Vendor agentDevin · Cursor · Copilot · Julessame jobRushYour harness, isolated, one PR
Isolated sandbox rooms, one per run

Neither product is ours. Rush is, and it gets one paragraph below. Every cell is from the vendor's own pages.

The short answer

Pick Cloudflare Sandbox if your app is on Workers. Pick Vercel Sandbox if it is on Vercel, or for 24-hour sessions and Active CPU billing.

Read this first

The useful distinction

Cloudflare Sandbox: Linux microVM containers, or isolated Dynamic Workers, started from a Worker to run untrusted or agent-generated code. You build the agent loop.

Vercel Sandbox: an SDK, CLI and API for on-demand Firecracker microVMs that run untrusted or agent-generated code. You bring the agent and the workflow. Generally available since 30 January 2026.

Head to head

Buyer questions

QuestionCloudflare SandboxVercel Sandbox
What runsNone built in. Cloudflare's docs show Claude Code, Codex and Devin running in a sandbox that belongs to one task.None built in. The default image includes Node.js, Python and coding agents; you start and drive them.
IsolationEach container is a Firecracker microVM with its own kernel and network. Largest instance is 4 vCPU, 12 GiB and 20 GB disk. The container must start before the first command.Firecracker microVM with its own filesystem and network. Sandboxes save state on stop by default. Sessions run 45 minutes on Hobby and 24 hours on Pro; default timeout is 5 minutes.
Result and pull requestLeft to you. Cloudflare's coding agent runner tutorial clones a repository, runs Claude Code and returns a diff, with the instruction not to commit.Left to you. You get exec, files and logs; the pull request is your code.
MCPCloudflare runs a managed remote Container MCP server that spins up a sandbox development environment.Vercel's remote MCP server has tools to create sandboxes, run commands, read and write files and set network policy.
TeamThe Cloudflare account and Workers model. No sandbox-specific sharing on the pages we read.Scoped to a Vercel team and project, with OIDC auth and a dashboard to manage sandboxes.
Starting priceWorkers Paid $5 / month, with 375 vCPU-minutes and 25 GiB-hours includedHobby free with 5 Active CPU hours / month; Pro draws from the $20 / month credit
Where it taps outNeeds Workers Paid and a Worker and Durable Object around each sandbox. Largest instance is 4 vCPU and 12 GiB. The tutorial ends at a diff, with no pull request or proof.5-minute default timeout. 24-hour session cap on Pro, 45 minutes on Hobby. A Pro sandbox tops out at 8 vCPU and 16 GB. Hobby creation pauses once quota is used.

Decision

When each side wins

Cloudflare Sandbox wins when

  • You want very small instances (from 1/16 vCPU) billed per second, placed on Cloudflare's network.
  • You want Dynamic Workers isolates for cheap code execution.
  • Your app already lives on Workers, R2 and Durable Objects.

Vercel Sandbox wins when

  • You want Active CPU billing: time waiting on I/O and model calls is not charged.
  • You need 19 regions, static egress IPs and VPC peering through Secure Compute.
  • You want up to 10,000 concurrent sandboxes on Pro and custom OCI images.

Rush

Where Rush sits

Both vendors' tutorials stop at running the agent. Rush continues to the branch, the pull request and its checks.

Honest limits

Skip Rush if

  • Rush runs three agents: Claude Code, Codex and OpenCode. It does not host an agent you wrote yourself.
  • Repositories come through the Rush GitHub App. A GitLab or Bitbucket repository cannot be a run's repository yet.
  • There is no self-hosted or customer-VPC deployment, and we do not publish a compliance report today.
  • Compute is metered. Free includes 5 agent-hours a month and Pro 40, each with a weekly ceiling.
  • You review the pull request. Rush does not merge for you.

FAQ

Questions people actually ask

Is Cloudflare Sandbox cheaper than Vercel Sandbox?

List prices, read off each vendor's pricing page on 17 October 2026. Cloudflare Sandbox: Workers Paid $5 / month, with 375 vCPU-minutes and 25 GiB-hours included. Vercel Sandbox: Hobby free with 5 Active CPU hours / month; Pro draws from the $20 / month credit. The units differ, so price the job you run, not the plan.

Where does Rush fit next to Cloudflare Sandbox and Vercel Sandbox?

Both vendors' tutorials stop at running the agent. Rush continues to the branch, the pull request and its checks.

Cluster

Keep reading

Citations

Sources

Every factual claim on this page traces to one of these URLs. Retrieval date is 17 October 2026 unless the source prints an earlier published date.

  1. [1] Cloudflare, “Sandboxes on Cloudflare”, retrieved 2026-10-17. https://developers.cloudflare.com/sandbox/
  2. [2] Cloudflare, “Choose a sandbox environment”, retrieved 2026-10-17. https://developers.cloudflare.com/sandbox/concepts/
  3. [3] Cloudflare, “Pricing (Containers)”, retrieved 2026-10-17. https://developers.cloudflare.com/containers/platform/pricing/
  4. [4] Cloudflare, “Limits (Containers)”, retrieved 2026-10-17. https://developers.cloudflare.com/containers/platform/limits/
  5. [5] Cloudflare, “Build a coding agent runner”, retrieved 2026-10-17. https://developers.cloudflare.com/sandbox/tutorials/claude-code/
  6. [6] Cloudflare, “Cloudflare's own MCP servers”, retrieved 2026-10-17. https://developers.cloudflare.com/agents/model-context-protocol/cloudflare/servers-for-cloudflare/
  7. [7] Vercel, “Vercel Sandbox”, retrieved 2026-10-17. https://vercel.com/docs/sandbox
  8. [8] Vercel, “Vercel Sandbox pricing and quotas”, retrieved 2026-10-17. https://vercel.com/docs/sandbox/pricing
  9. [9] Vercel, “Run untrusted code with Vercel Sandbox, now generally available”, published 2026-01-30. https://vercel.com/blog/vercel-sandbox-is-now-generally-available
  10. [10] Vercel, “Vercel Sandbox vs E2B”, published 2026-03-20. https://vercel.com/kb/guide/vercel-sandbox-vs-e2b
  11. [11] Vercel, “Sandboxes (Vercel MCP tools)”, retrieved 2026-10-17. https://vercel.com/docs/agent-resources/vercel-mcp/tools/sandboxes
  12. [12] Rush, “Rush product requirements”, retrieved 2026-09-15. https://getrush.ai/cloud
  13. [13] Rush, “Rush pricing (live contract on getrush.ai)”, retrieved 2026-09-15. https://getrush.ai/pricing
  14. [14] Rush, “Isolation, plainly”, retrieved 2026-10-17. https://getrush.ai/docs/concepts/isolation
  15. [15] Rush, “Results and proof”, retrieved 2026-10-17. https://getrush.ai/docs/concepts/results-and-proof
  16. [16] Rush, “Usage and billing”, retrieved 2026-10-17. https://getrush.ai/docs/concepts/usage-and-billing
  17. [17] Rush, “Rush MCP server”, retrieved 2026-10-17. https://getrush.ai/docs/concepts/mcp-server
  18. [18] Rush, “Automations”, retrieved 2026-10-17. https://getrush.ai/docs/concepts/automations

Next

Run the next Task on Rush

Connect a repository. Pick Claude Code, Codex, or OpenCode. Review the PR.

How the runtime works