A reusable hard drive for your cloud computer. 💻
Share and fork files across multiple sandboxes to reuse installed dependencies, enable collaboration and persist agent workspaces.
Vercel Drives is generally available. You can now run stateful agents on Vercel.
vercel.com/blog/introducing-…
Persistent memory shared between agents
Vercel Sandbox now has persistent storage with Drives, in public beta on every plan.
▪︎ Store agent workspaces, data, models, deps
▪︎ Read snapshots across parallel sandboxes
▪︎ Mount up to four Drives per sandbox
▪︎ Up to 16 TiB per Drive
vercel.com/changelog/drives-…
The future of agentic development is automatic benchmarking on every PR, running on infra independent of your laptop
Harbor now runs evals on Vercel Sandbox.
• Run Terminal-Bench or 300+ datasets
• Isolate each trial in its own microVM
• Keep credentials out of the sandbox
• Swap models with one AI Gateway key
vercel.com/changelog/run-ter…
A lot of cool stuff coming out of here
Introducing Vercel Labs
Tools for devs in the AI era
agent-browser, skills, json-render, deepsec, fx, just-bash, portless, vgpu and more
We experiment in public: ship early, learn from feedback, and keep working on what people find useful
We've been shipping under the Labs name for a while. Now, Labs is an official team at Vercel focused on exploring new capabilities and primitives that change what developers and agents can do.
Here's what to expect:
→ Labs products: maintained, supported, built to be relied on
→ Active experiments: moves fast, expect rough edges and breaking changes
→ Past experiments: ideas that become new projects, make it into existing products, or teach us what to build next
vercel.com/labs?experiment-i…
Sandboxes in Germany right in time for Oktoberfest
You can now run Vercel Sandbox in all Vercel compute regions.
▪︎ Set a default per project
▪︎ Add failover regions on Pro and Enterprise
▪︎ Cut latency and control data residency
vercel.com/changelog/vercel-…
Elisabeth Rülke retweeted
Fable 5.1 owes me a fucking apology.
I gave Astra and Fable the same photo and asked them to draw me in Paint using computer use.
I fucking lost it.
Elisabeth Rülke retweeted
Cursor Cloud Agents, now in Vercel Sandbox.
Cursor manages the agent loop. Each request runs in an isolated Firecracker microVM, with:
✓ A scale-to-zero worker pool
✓ Durable retries and cleanup
✓ Short-lived, user-scoped credentials
vercel.com/changelog/run-cur…
Excited to support EU sandboxes + many more regions coming soon
Vercel Sandbox now runs in more regions. Closer to your data, less latency on every call.
𝚊𝚠𝚊𝚒𝚝 𝚂𝚊𝚗𝚍𝚋𝚘𝚡.𝚌𝚛𝚎𝚊𝚝𝚎({
𝚛𝚎𝚐𝚒𝚘𝚗: "𝚌𝚍𝚐𝟷",
𝚏𝚊𝚒𝚕𝚘𝚟𝚎𝚛𝚁𝚎𝚐𝚒𝚘𝚗𝚜: ["𝚒𝚊𝚍𝟷", "𝚌𝚕𝚎𝟷"]
})
vercel.com/changelog/vercel-…
You can now manage your sandbox images from Vercel CLI :)
You can now manage Vercel Container Registry with Vercel CLI.
▲ ~/ vercel vcr build docker --push
vercel.com/changelog/manage-…
Elisabeth Rülke retweeted
You can now manage Vercel Container Registry with Vercel CLI.
▲ ~/ vercel vcr build docker --push
vercel.com/changelog/manage-…
Come get your money 🗣️
Agents can now exploit vulnerable sandbox boundaries, so we are testing ours in the open.
$1,000,000 hacker challenge for Vercel Sandbox:
• Escape the Firecracker microVM
• Defeat the host-side network boundary
• Up to $50k/report via @Hacker0x01
vercel.com/blog/one-million-…
Elisabeth Rülke retweeted
Given the state of AI we must internalize: Everything hackable will get hacked.
Two forces are at work:
▪︎ Near-frontier open weight models hack without refusal
▪︎ Frontier models help you defend yourself
How we're approaching this new reality ↓
vercel.com/blog/everything-h…
As models get more powerful, a dedicated kernel isn’t enough. What the sandbox can talk to matters as much as what it can’t escape.
We're making our Sandbox Egress Firewall free on every plan.
Vercel Sandbox goes beyond compute isolation. Recent security research shows why: untrusted code must be contained at the network boundary, not just the runtime.
vercel.com/blog/a-sandbox-wi…
Elisabeth Rülke retweeted
Hermes Agent can run using Vercel AI Gateway and Vercel Sandbox.
Use your AI Gateway key for inference to reach every model with full observability on spend, and Sandbox to run each command in an isolated microVM of its own.
vercel.com/changelog/vercel-…
