Alpha · Orkait

Cloud runtime for untrusted code.

Execute code from users, agents, and LLMs in kernel-isolated sandboxes. 8 languages, 36ms latency, evidence-backed verdicts.

36ms
p50 latency
8langs
supported
3layers
kernel isolation
Languages supported
Sign up Try in playground
terminal
$ curl -X POST \
/api/submit \
-H "X-API-Key: rb_live_****" \
-d '{"language":"python","code":"print(42)"}'
ACAccepted
python · completedruntime / normal_exit
Output
stdout
42
stderr
empty
Timing
CPU time9 ms
Wall time10 ms
CPU/wall0.900
Patterncpu bound
Process
Exit code0
Signalnull
Procs0 / 10
Memory
Peak3.68 MB
Limit256.00 MB
OOM events0
OOM kills0
cgroup CPU9.1 ms
Security
isolationstrict
pid namespacemount namespacenetwork namespacememory limitprocess limitno new privileges
Missingnone
Containmentok
Reapclean
Zombies0
Metadata
Schema1.0
Integritycomplete
Created2026-04-03 08:05:23Z
Started2026-04-03 08:05:23Z
Completed2026-04-03 08:05:23Z
id: f2c6c5f7-1203-46e5-8a4f-a619c12bfeb0
Have a key? Open playground
Product

Two profiles. Judge mode live now.

One API, two isolation profiles. Your API key maps to a profile - same endpoint, same contract, different resource limits.

Assessment Platform
[2026] Compiling solution...queued
#include <iostream>
using namespace std;

int main() {
  int n; cin >> n;
  // O(N) solution
  long long sum = 0;
  for(int i=1; i<=n; i++)
    sum += i;
  cout << sum;
  return 0;
}
Rustbox Kernel
ISO-LEVEL: 4
Rustbox Logo
Running tests...
LIMIT
4s CPU
RAM
256 MB
NET
Off
Execution Verdict
Test Suite Execution
WA
Test #112ms
Test #218ms
Test #3Wrong Answer
Judge
Open Beta

Competitive programming, coding assessments, automated grading.

256 MBMemory7sWall4sCPU10Procs
No network, no loopback, no DNS
Agent
On Request

LLM tool execution, interactive environments, long-running tasks.

2 GBMemory60sWall30sCPU64Procs
Outbound-only via nftables
8 languages supported
Playground

Run code before wiring the API.

Try Judge mode from the landing page: switch languages, edit code, resize panels, provide stdin, and inspect the same structured verdict shape your API integration receives.

pythonwarming
editor
1from statistics import mean
2scores = [95, 88, 92]
3print(round(mean(scores), 2))
stdin
Optional input stream
result
accepted

91.67

stdout

time

36ms

memory

18MB

exit

0

Security

Why trust Rustbox with untrusted code.

Every execution runs in a fresh sandbox built from 8 kernel layers, with verdicts backed by kernel evidence instead of exit-code guesses.

8kernel layers

8 kernel isolation layers

PID, mount, and network namespaces; cgroups v2; seccomp-BPF; capability drop; credential isolation; NO_NEW_PRIVS.

51seccomp rules

Compile-time enforced

Rust typestate chain guarantees order at language level. Skip an isolation configuration and it will refuse to compile.

147adversarial tests

Tested against real attacks

147 adversarial scenarios across all 8 Judge languages cover fork bombs, chroot escapes, ptrace, network attempts, and symlink attacks.

Interactive Threat Simulator

Step through the isolation layers and see which kernel primitive contains each attack vector.

PID NSMount NS + ChrootNetwork NSCgroups v2Seccomp-BPFCapability DropCredential IsolationNO_NEW_PRIVS
Active Audit sequence
REPrivilege Escalation
caught at NO_NEW_PRIVS
pythonPOST /api/submit?wait=true
import os
os.setuid(0)
print(os.getuid())
Cause
re_nonzero_exit
Cgroup
cgroup_v2
Isolation
strict
Controls applied · 6/6
pid_namespacemount_namespacenetwork_namespacememory_limitprocess_limitno_new_privileges
Performance

59 ms median.

Full kernel isolation, in-region origin. P50 across 15 trials.

n = 500,000
  • Python
    62 ms
    tail 102
  • JavaScript
    59 ms
    tail 100
  • TypeScript
    62 ms
    tail 101
  • C
    102 ms
    tail 142
  • C++
    308 ms
    tail 309
  • Java
    474 ms
    tail 476
15 trials · async + /result?wait=true1 vCPU · 256 MB per task · in-region
API

First result in 60 seconds.

Raw HTTP or our SDK in Python, Node, Go, or Rust. Same structured response.

Open PlaygroundAPI Reference
submit.sh
curl -X POST https://rustbox.orkait.com/api/submit?wait=true \
  -H 'x-api-key: rb_live_…' \
  -H 'content-type: application/json' \
  -d '{"language":"python","code":"print(42)"}'
Output · wall 20 ms · cpu 13 ms
AC · Accepted
{
  "id": "02128880-a3a1-4025-ab89-f4d7ef3520de",
  "verdict": "AC",
  "stdout": "42\n",
  "stderr": "",
  "exit_code": 0,
  "wall_time_secs": 0.020,
  "cpu_time_secs": 0.013,
  "memory_peak_bytes": 3715072,
  "language": "python",
  "profile": "judge",
  "output_integrity": "complete",
  "evidence": { "...": "12 more keys" }
}

Ship your first request →

Get API keyRead the docs
Pricing

Your usage · CPU-min / month

2k

Estimated cost

$29/mo

Free
25
Pro
3k
Scale
25k
Cheapest plan: Pro1k CPU-min/mo headroom

Free

25 trial runs / month

Start free
—cap exceeded

Try the Agent profile at a safe public cap.

  • 1 req/min burst
  • 1 GB memory · 30s wall
  • Filtered network
  • Community support
your pick

Pro

3k CPU-min / month

Start Pro
$29/month

Production agent tool-calls with a real wallet.

  • ↑ Everything in Free
  • Agent credits reserved before compute
  • 1 GB memory · 60s wall
  • Priority queue
  • Email support

Scale

25k CPU-min / month

Start Scale
$149/month

High-volume agent workloads with autoscaled capacity.

  • ↑ Everything in Pro
  • Lower overage pricing ($1/1k CPU-min)
  • Autoscaled agent workers
  • Team-ready usage controls
  • Priority support
FAQ

Questions before you wire it in.

Short answers for the constraints that usually matter before teams add sandbox execution to a product.

Need a specific answer?

Send the workload shape, expected volume, language mix, and security requirements through the contact page.