---
title: "Tencent's CubeSandbox Boots Isolated AI Agent VMs in Under 60ms"
subtitle: "Tencent open-sources CubeSandbox, a Rust-built microVM sandbox for AI agents that cold-starts in under 60ms with hardware-level isolation and drop-in E2B compatibility"
url: "https://alphasignal.ai/news/tencent-s-cubesandbox-boots-isolated-ai-agent-vms-in-under-60ms"
author: "AlphaSignal Newsroom"
author_url: "https://alphasignal.ai/editorial-team"
company: "AlphaSignal"
company_url: "https://alphasignal.ai/company/alphasignal"
published: "2026-07-04T15:02:09.000Z"
updated: "2026-07-04T19:15:16.604Z"
type: "Repo"
topics:
  - "Agents"
  - "Open Source"
subtopics:
  - "Computer Use"
  - "Guardrails"
  - "Tool Use"
upvotes: 11
source_url: "https://github.com/TencentCloud/CubeSandbox"
comments: 0
truncated: true
---

# Tencent's CubeSandbox Boots Isolated AI Agent VMs in Under 60ms

> Tencent open-sources CubeSandbox, a Rust-built microVM sandbox for AI agents that cold-starts in under 60ms with hardware-level isolation and drop-in E2B compatibility

Running AI agent code safely is one of the hardest unsolved problems in production agent infrastructure. Agents write code that can't be reviewed before it runs, call tools with wrong arguments, and sometimes try to delete your filesystem. The standard answer has been Docker containers, but containers share the host kernel, and a kernel-level exploit can escape the container entirely. [CubeSandbox](https://github.com/TencentCloud/CubeSandbox) is Tencent Cloud's answer: a fully open-source, hardware-isolated sandbox service that boots a dedicated microVM per agent in under 60ms, uses less than 5MB of memory overhead per instance, and is a drop-in replacement for E2B.

## The problem with the status quo

The agent sandbox market has been growing at a staggering pace. E2B alone went from 40,000 sandbox sessions per month in March 2024 to roughly 15 million per month by March 2025\. But the dominant approaches all make uncomfortable tradeoffs:

* **Docker containers** are fast but share the host kernel. Docker containers possess a risk of providing incomplete isolation, either independently, or when used in combination with kernel vulnerabilities.
* **Traditional VMs** give you a dedicated kernel but take seconds to boot, making them unusable for tight agent loops.
* **Hosted services like E2B** abstract the infrastructure but lock you into their cloud, their pricing, and their data residency rules.

Agents work in tight loops , generate, execute, evaluate, iterate. If sandbox creation takes 10+ seconds, the agent stalls. The ideal sandbox needs VM-level isolation at container-level speed, and it needs to be cheap enough to run thousands of instances concurrently.

## What CubeSandbox actually is

Cube Sandbox is a high-performance, out-of-the-box secure sandbox service built on RustVMM and KVM. It is the industry's first open-source sandbox service that combines hardware-level isolation with sub-100ms startup. Instead of wrapping Docker, the team implemented a VMM from scratch in Rust, optimized specifically for AI agent scenarios.

The key insight is that Firecracker, the microVM powering E2B, is a general-purpose VMM. Firecracker is a general-purpose MicroVM, and its startup process includes many steps unnecessary for agent sandbox scenarios. The CubeSandbox team performed full-link tailoring: they minimized the device model to only retain virtual devices essential for sandbox scenarios (virtio-net, virtio-blk, serial), and built a customized guest kernel that retains only the minimal feature set required for agent execution, drastically shortening the kernel boot path.

_Preview only. Full text requires an AlphaSignal Pro account._

## Sources

- [TencentCloud/CubeSandbox - GitHub](https://github.com/TencentCloud/CubeSandbox)
- [Cube Sandbox is Now Open Source: Why We Built a Fast and Secure Sandbox for AI Agents - DEV Community](https://dev.to/jerrylin_0101/cube-sandbox-is-now-open-source-why-we-built-a-fast-and-secure-sandbox-for-ai-agents-d4k)
- [Tencent Cloud Cube Sandbox Goes Fully Open-Source - PR Newswire](https://www.prnewswire.com/news-releases/tencent-cloud-cube-sandbox-goes-fully-open-source-with-five-major-breakthroughs-enabling-large-scale-agent-deployment-302751501.html)
- [What is CubeSandbox for AI Agents? Isolation Explained - APIDog](https://apidog.com/blog/what-is-cubesandbox-for-ai-agents/)
- [CubeSandbox Documentation](https://docs.cubesandbox.ai/)