Daytona
Sub-100ms sandboxes for AI agents that write and run code — now closed source
Overview
Daytona spins up isolated, stateful sandboxes — Docker-compatible, each with its own kernel — in under 90ms so AI agents can execute generated code safely. Usage-based cloud billing with $200 of free compute, SDKs in five languages, and BYOC for enterprises. Its core moved to closed source in June 2026; the SDKs stay Apache 2.0.
Pricing
Pricing shown for reference only. These figures reflect RECATOOLS research as of 1 Oct 2026 and may be out of date or incomplete. This is not financial or purchasing advice — always confirm the current price on the provider’s official website before making any decision.
- 5 GB free storage
- Instant sandbox creation
- $0.0162 per GiB-hour of memory
- GPUs from $0.99/h on demand
- Windows from $0.0858 per vCPU-hour
- $10,000 in credits up front
- Up to $50,000 (pricing page) or $100,000 (startups page)
- SSO and audit logs
- Bring-your-own-cloud (BYOC)
- Dedicated support
Use cases
What you can produce with Daytona
- Sub-90ms sandbox creation (vendor-measured)
- Python, TypeScript, Ruby, Go and Java SDKs
- Persistent/stateful sandboxes across agent runs
- REST API for programmatic sandbox control
- Apache 2.0 SDKs and clients (the core is closed source since June 2026)
- GPU-backed and computer-use (Linux, Windows, macOS) sandboxes
- Enterprise BYOC deployment
Daytona pivoted from a dev-environment tool into infrastructure for running AI-generated code, and the pivot worked: boot times under 90ms by its own measure, persistent state between agent runs, and SDKs for Python, TypeScript, Ruby, Go and Java, now joined by computer-use and GPU sandboxes. It's plumbing, not a product end users touch directly — evaluate it if you're building an agent platform that needs to execute untrusted code safely and fast, alongside E2B and Modal. Two things changed in 2026: the core went closed source in June, so self-hosting a current build is out and only Enterprise BYOC remains, and an April credential-exposure flaw was fixed within hours. Usage-based billing means costs can creep if you don't watch concurrency. A $24M Series A and a $1M run rate within three months of the pivot suggest the market agrees this category matters.
What we found
Daytona started as an open-source alternative to Gitpod and Coder for cloud dev environments, then repositioned around AI agents that need somewhere safe to run the code they write. In June 2026 it made a second big change: it moved its production codebase to closed source, citing security. The public repository is frozen at version 0.190.0 under the AGPL; only the SDKs and clients, now in a separate repository, remain open, under Apache 2.0.
The product is fast, composable sandboxes: Daytona says they spin up in under 90 milliseconds, each with a dedicated kernel and Docker-compatible images, and state persists between runs, so installed packages don't need reinstalling on every agent turn. SDKs cover TypeScript, Python, Ruby, Go and Java, and the platform now also offers computer-use sandboxes on Linux, Windows and macOS, and GPU machines. It claims HIPAA, SOC 2 and GDPR compliance. In April 2026 it disclosed a flaw that let a sandbox read the launching account's API credential, fixed within five hours of disclosure.
Funding backs up the traction: a $24 million Series A led by FirstMark Capital in February 2026, with LangChain, Turing, Writer and SambaNova named as customers, and the company says it reached a $1 million forward revenue run rate within three months of the pivot. Comparisons ranking it among the leading agent sandboxes often come from competitors, such as Northflank, so read them carefully.
Pricing is usage-based and billed per second: $0.0504 per vCPU-hour, $0.0162 per GiB-hour of memory and a small storage charge after 5 GB free, with GPUs from $0.99 an hour on demand. New accounts get $200 of free compute without a card; a startup programme offers credits starting at $10,000, and Enterprise adds SSO, audit logs and bring-your-own-cloud. Self-hosting a current build is no longer possible. For teams building agent platforms that need to run untrusted code without babysitting infrastructure, it is a credible, well-funded choice — but no longer an open-source one.
Compiled by RECATOOLS from public sources: vendor documentation and pricing, code repositories and published reporting.
About this listing
This entry was compiled from publicly available data including Daytona's official website, press releases, documentation, and reputable third-party publications. RECATOOLS is not affiliated with Daytona unless explicitly stated.
Third-party AI tools update their pricing, features, availability, and policies frequently. Information here may be outdated by the time you read this — we make reasonable efforts to keep listings current, but cannot guarantee absolute accuracy.
For the latest details, please refer to Daytona directly →
Spotted something out of date? Suggest an update →
More in Code & Dev Tools
