nono

nono

Always Further
+
+

Related Products

  • Google Cloud Platform
    61,066 Ratings
    Visit Website
  • BAND
    3 Ratings
    Visit Website
  • RaimaDB
    12 Ratings
    Visit Website
  • NMI Payments
    114 Ratings
    Visit Website
  • ESET PROTECT Advanced
    2,332 Ratings
    Visit Website
  • Gearset
    305 Ratings
    Visit Website
  • LM-Kit.NET
    29 Ratings
    Visit Website
  • Dragonfly
    16 Ratings
    Visit Website
  • Google Compute Engine
    1,169 Ratings
    Visit Website
  • Gemini Enterprise Agent Platform
    1,161 Ratings
    Visit Website

About

CreateOS Sandbox is a hosted compute service for developers building AI agents, code-execution platforms, and developer tools. It creates isolated Firecracker micro-virtual machines, each with its own Linux kernel, where teams can run untrusted or model-generated code. Developers can provision environments through a TypeScript SDK, command-line interface, MCP tools, or REST API, execute commands, and connect sandboxes through private networks. Sandboxes can be paused and resumed with guest state preserved, configured from reusable templates, and connected to customer-owned Amazon S3, MinIO, or Cloudflare R2 storage. Usage is metered per second for compute, memory, and disk; paused environments continue to incur memory and storage charges. The service offers EU and US regions, plus an enterprise option to run on customer infrastructure.

About

nono is an open source, kernel-enforced sandbox for AI coding agents and LLM workloads. Unlike policy-based guardrails that intercept and filter operations, nono uses OS security primitives — Landlock on Linux and Seatbelt on macOS — to make unauthorised operations structurally impossible at the syscall level. Wrap any AI agent — Claude Code, OpenCode, OpenClaw, or any CLI process — with a single command. nono applies default-deny filesystem access, blocks destructive commands (rm, dd, chmod, sudo), isolates credentials and API keys, and cascades all restrictions to child processes. No escape mechanism exists once restrictions are applied. Built-in profiles get you running in seconds. Secrets inject securely from the system keystore and are zeroised on exit. Audit logging, atomic rollbacks, and Sigstore-attested policy signing are on the roadmap. Apache 2.0. From the creator of Sigstore.

Platforms Supported

Windows Not Supported
Mac Not Supported
Linux Not Supported
Cloud Supported
On-Premises Supported
iPhone Not Supported
iPad Not Supported
Android Not Supported
Chromebook Not Supported

Platforms Supported

Windows Not Supported
Mac Supported
Linux Supported
Cloud Not Supported
On-Premises Not Supported
iPhone Not Supported
iPad Not Supported
Android Not Supported
Chromebook Not Supported

Audience

Developers and teams building AI agents, code-execution platforms, and developer tools.

Audience

Developers & AI power users — Anyone running Claude Code, Cursor, OpenCode, or other CLI-based AI coding agents on their local machine who wants to prevent agents from accessing credentials, deleting files, or touching paths outside the project directory. CISO, Security engineers & DevSecOps teams — Teams responsible for establishing safe agent usage policies across engineering organisations. nono provides kernel-enforced, auditable enforcement without requiring infrastructure changes. Platform & ML engineers — Engineering teams building or evaluating agentic AI workflows who need runtime isolation as part of their agent stack. Software companies adopting AI tooling — Organisations in software development, fintech, healthcare, and any regulated industry where developer workstations hold sensitive credentials, proprietary code, or compliance-relevant data that must not be accessible to autonomous agents. Open source contributors & researchers — Security researchers and OSS contributors working with or studying AI agent threat models, kernel sandboxing, and runtime security primitives.

Support

Phone Support Not Supported
24/7 Live Support Not Supported
Online Supported

Support

Phone Support Not Supported
24/7 Live Support Not Supported
Online Not Supported

API

Offers API Supported

API

Offers API Not Supported

Screenshots and Videos

No images available

Screenshots and Videos

No images available

Pricing

$0.03616363/vCPU/hour
Usage is billed per second: $0.03616363 per vCPU-hour, $0.01159025 per GiB-RAM-hour, and $0.0001584 per GB-hour of storage. There are no egress fees or minimums. Paused sandboxes incur memory and storage charges, but no vCPU charge. New accounts receive 500 free credits.
Free Version Supported
Free Trial Not Supported

Pricing

No information available.
Free Version Supported
Free Trial Not Supported

Reviews/Ratings

Overall 0.0 / 5
ease 0.0 / 5
features 0.0 / 5
design 0.0 / 5
support 0.0 / 5

This software hasn't been reviewed yet. Be the first to provide a review:

Review this Software

Reviews/Ratings

Overall 0.0 / 5
ease 0.0 / 5
features 0.0 / 5
design 0.0 / 5
support 0.0 / 5

This software hasn't been reviewed yet. Be the first to provide a review:

Review this Software

Training

Documentation Supported
Webinars Not Supported
Live Online Not Supported
In Person Not Supported

Training

Documentation Supported
Webinars Not Supported
Live Online Not Supported
In Person Not Supported

Company Information

NodeOps
Founded: 2023
United States
createos.sh/products/sandbox

Company Information

Always Further
Founded: 2025
United Kingdom
alwaysfurther.ai/

Alternatives

Alternatives

Spawn

Spawn

OpenRouter
Sprites

Sprites

Fly.io

Categories

Categories

AI Security Supported

Integrations

Amazon S3 Supported
Claude Code Not Supported
Cloudflare R2 Supported
MinIO Supported
Model Context Protocol (MCP) Supported
OpenAI Codex Not Supported
OpenClaw Not Supported
OpenCode Not Supported

Integrations

Amazon S3 Not Supported
Claude Code Supported
Cloudflare R2 Not Supported
MinIO Not Supported
Model Context Protocol (MCP) Not Supported
OpenAI Codex Supported
OpenClaw Supported
OpenCode Supported
Claim CreateOS Sandbox and update features and information
Claim CreateOS Sandbox and update features and information
Claim nono and update features and information
Claim nono and update features and information