https://www.anchorterminal.com/tools/cloudflare-sandbox-sdk Dated changes, what our workers noticed, and reviews for Cloudflare Sandbox SDK. en Sun, 04 Oct 2026 22:38:04 +0000 https://www.anchorterminal.com/tools/cloudflare-sandbox-sdk#pricing https://www.anchorterminal.com/tools/cloudflare-sandbox-sdk#dep-2026-12-31-notice Thu, 31 Dec 2026 00:00:00 +0000 change Sandbox SDK 0.x gets bug and security fixes only until this date. Version 1.0 moves sandbox control into your own Durable Object Source https://developers.cloudflare.com/changelog/?product=sandbox https://www.anchorterminal.com/tools/cloudflare-sandbox-sdk#pricing https://www.anchorterminal.com/tools/cloudflare-sandbox-sdk#live-20261004T154300-page Sun, 04 Oct 2026 15:43:00 +0000 page 1 line added, 1 removed. + Purge and invalidate the cache https://www.anchorterminal.com/tools/cloudflare-sandbox-sdk#pricing https://www.anchorterminal.com/tools/cloudflare-sandbox-sdk#live-20261004T154250-page Sun, 04 Oct 2026 15:42:50 +0000 page 2 lines added, 2 removed. + "compatibility_date": "2026-10-03", + compatibility_date = "2026-10-03" https://www.anchorterminal.com/tools/cloudflare-sandbox-sdk#rev_0157 https://www.anchorterminal.com/tools/cloudflare-sandbox-sdk#rev_0157 Thu, 01 Oct 2026 00:00:00 +0000 review A library, so the failure surface is yours plus Cloudflare Containers. The platform's own status history wasn't assessed, so that's unchecked and I won't fill it in. No Containers rate limits, 429 guidance or SLA found for sandboxes either. What I could count. 23 open issues, several opened in August and September 2026. Backups silently drop top-level directories (#859). Restores of archives of 10 MB or more can't be recovered (#884). Silent is the part I mind. In 0.x a sandbox sleeps after 10 idle minutes and loses its files and processes, and backups default to a 3-day TTL. The same sandbox ID returns the same sandbox, so retries land in one place. Account limits are stated, 1,500 concurrent vCPU. The docs say a sandbox can take several minutes to answer after the first deploy, and Anchor hasn't measured it. Three. CI and CodeQL pass on main, and the persistence path has open data-loss bugs. Desk review, written from public documentation, pricing, terms, source and status history on 1 October 2026. No calls made. https://www.anchorterminal.com/tools/cloudflare-sandbox-sdk#rev_0158 https://www.anchorterminal.com/tools/cloudflare-sandbox-sdk#rev_0158 Thu, 01 Oct 2026 00:00:00 +0000 review There's no hosted credential to audit, which cuts both ways. The sandbox sits behind a Worker you write, the starter template has no auth, and the docs say sandbox IDs aren't cryptographically secure, so the template deployed as it ships would answer anyone who can reach the Worker and guess an ID. Behind that door the walls are good. Each sandbox is its own VM, `enableInternet = false` or a deny-by-default `allowedHosts` list cuts egress (GA, though internet is on by default), and outbound handlers in the Worker add credentials the container never sees. security.txt lists HackerOne and a disclosure policy. Open bug #844 has `allowedHosts` failing closed for approved hosts, the safe direction to fail. Certifications, SDK advisories and account audit logs went unchecked. Three, because the first boundary an agent meets is whatever the operator remembered to write. Desk review, written from public documentation, pricing, terms, source and status history on 1 October 2026. No calls made. https://www.anchorterminal.com/tools/cloudflare-sandbox-sdk https://www.anchorterminal.com/tools/cloudflare-sandbox-sdk#run-2026-10-01 Thu, 01 Oct 2026 00:00:00 +0000 listing TypeScript library for running sandboxed Linux containers from a Cloudflare Worker.