Skip to content

Sandboxer vs Cloudflare Workers for Platforms

Workers for Platforms lets you run code written by your customers or by AI in isolated Workers, with per-customer limits, tagging and observability. It is a multi-tenant serverless runtime, not a machine. Pick it to host many small tenant scripts on Cloudflare's network; pick Sandboxer for a full Linux environment.

Checked against Cloudflare Workers for Platforms' public docs on October 24, 2026. Sources are linked in the table and listed below.

At a glance

Sandboxer and Cloudflare Workers for Platforms compared
CapabilitySandboxerCloudflare Workers for Platforms
IsolationmicroVM
Cloud Hypervisor, its own kernel
Isolated Worker per customer
Each customer gets their own Worker, described as a secure and isolated environment with tenant separation.
Full Linux with root
Ubuntu 24.04, sudo, systemd
Docker inside
Preinstalled
Nested virtualization (/dev/kvm)
Pause and resume with memory
Running processes come back
Fork a sandbox
Copy-on-write disk copy that boots fresh
HTTPS URL per port
Private with a token, or public
Longest sessionNo limit on paid plans
Auto-stop is up to 30 days or off
30 s CPU per invocation
15 minutes per Cron Trigger or Queue Consumer invocation; duration not charged.
BillingPer second, flat rate per size
Stopped sandboxes are free
$25/mo plus requests, CPU time and scripts
20M requests, 60M CPU-ms and 1,000 scripts included; then $0.30/M requests, $0.02/M CPU-ms, $0.02/script.
GPUs
Self-host or open source
RegionsUS East (Virginia) and EU Central (Finland)Cloudflare global network

= not documented publicly.

Where Cloudflare Workers for Platforms is strong

  • Each customer's code runs in its own isolated Worker.
  • Custom limits cap CPU time and subrequests per customer.
  • Wall-clock duration is not charged (CPU time is).
  • It deploys across Cloudflare's global network.

Where Sandboxer differs

  • Workers for Platforms runs serverless Workers with CPU-time limits (30 s per invocation); Sandboxer runs long-lived VMs.
  • Cloudflare's pages describe a Worker runtime rather than a Linux machine; Sandboxer gives root, systemd and Docker in a full VM.
  • Cloudflare bills requests and CPU time; Sandboxer bills provisioned machine time.
  • Cloudflare is global; Sandboxer runs in us-east and eu-central.

Pick Cloudflare Workers for Platforms if

  • You host many small tenant scripts and want global reach.
  • You need per-tenant CPU limits and observability.
  • You want to give each customer their own isolated Worker with custom limits and tags.

Pick Sandboxer if

  • You need a full Ubuntu VM with root, systemd and Docker inside a microVM with its own kernel.
  • You want stop/resume that keeps running processes and memory, and forks from disk snapshots.
  • You want coding agents (Claude Code, Codex and others) preinstalled and driven through a prompt API.

Sources

Products change. If something here is out of date, email hello@sandboxer.com and we'll fix it. Cloudflare Workers for Platforms is a trademark of its owner. Sandboxer is an independent product and is not affiliated with Cloudflare Workers for Platforms.

Other comparisons

All 169 comparisons