Bastion – self-hosted VMs for background coding agents
VM-level isolation beats containers for agent security but the market is speculative.
A hypervisor and sandbox cloud for self-hosted AI agents and RL
Live snapshots without pausing VMs—Firecracker can't do this.
AI infrastructure engineers, platform teams running agent workloads
Firecracker · Kata Containers · gVisor
We also provide a basic orchestrator that handles placement of the microVMs, creating clusters with HA, maintaining a warm pool of VMs, and takes care of setting up networking and monitoring.
Our benchmarks on a metal instance shows an acquire VM from pool and execute code p99 of 35ms which places it as one of the fastest VM based sandboxes you can get right now. You could also snapshot a small sandbox and resume in ~80ms.
You can easily self-host a multi-node cluster of this right now on your cloud with nested-virt enabled machines or better on bare metal by providing the docs to your coding agent.
Tarit - https://github.com/instavm/tarit
Quickstart - https://github.com/instavm/tarit/blob/main/orch/docs/QUICKST...
VM-level isolation beats containers for agent security but the market is speculative.
Self-hosted agent browser with noVNC handoff when automation stalls on logins.
Dual MCP server architecture lets agents safely exec shell commands inside isolated LXC containers.
Landlock + seccomp-BPF sandboxing with preset configs beats rolling your own isolation.
Self-hosted Slack alternative optimized for AI agent integrations and rate limits.
E2B sandbox isolation prevents agent chaos while streaming realtime previews before PR creation.