CreateOS Sandbox vs Hetzner Dedicated
Rent Hetzner Dedicated when you want a whole physical machine in the EU at a very low price per core and have the sysadmin skills to run it. Use CreateOS Sandbox when untrusted or agent-written code needs its own isolated micro-VM per task, created by API. On a Hetzner server, isolation between workloads is something you build yourself.
Pricing at a Glance
CreateOS rates verified 17 October 2026. Hetzner Dedicated pricing as published on 17 October 2026. Rates billed per GB rather than per GiB, or as bundled sizes, are quoted as published rather than converted.
CreateOS Sandbox
- Compute
- $0.0362 /vCPU-hr
- Memory
- $0.0116 /GiB-hr
Hetzner Dedicated
Hetzner lists AX42-1 (8 cores, 64 GB DDR5 ECC, 2x 512 GB NVMe) at EUR 97.30/month plus EUR 49.00 setup excl. VAT from 15 June 2026, billed hourly up to the monthly cap, as of 17 October 2026.
Where CreateOS Sandbox Fits Better
What CreateOS Sandbox brings to this matchup, with a plain note on where Hetzner Dedicated has the edge.
Isolation per task is built in: each sandbox is a Firecracker micro-VM, while a dedicated server leaves VM or container isolation to you.
No setup fee and per-second billing, against setup fees and usage rounded up to full hours.
Per-sandbox egress allowlists; Hetzner offers a stateless server firewall, and per-environment egress policy is not documented.
Where Hetzner Dedicated is strong
Very low price per core and per GB of RAM for whole dedicated machines, unlimited free traffic, hourly billing capped at the monthly price, and a refurbished Server Auction with cheaper machines and no setup fee.
Which to Pick
Pick CreateOS Sandbox if
- You need many short-lived environments, each isolated from the others, without running a hypervisor yourself.
- You want pause, resume and fork of environments with memory kept.
- You do not want setup fees or hour rounding for jobs that last minutes.
Pick Hetzner Dedicated if
- You need steady, always-on bare-metal capacity in Germany or Finland.
- You push large volumes of traffic and want it unlimited and free.
- You want a GPU inference box such as GEX131 with an RTX PRO 6000 Blackwell Max-Q.
Head-to-Head Comparison
Every dimension side by side, checked on 17 October 2026 against each vendor's own docs and pricing pages. "Not published" means we could not find it on the vendor's pages, not that the feature is missing.
| Dimension | CreateOS Sandbox | Hetzner Dedicated |
|---|---|---|
| Isolation | Firecracker micro-VM with its own guest kernel | Single-tenant physical server; any VM or container isolation is up to you |
| Create and destroy by API | Yes: REST API, CLI, MCP server and SDKs for TypeScript, Go, Python, Rust, C# and Java (all but TypeScript pre-1.0) | Robot Webservice REST API, including server ordering; no official SDK found |
| Memory snapshot (pause and resume) | Yes: disk, memory and CPU state saved; vCPU stops billing, memory and storage still bill | Not documented |
| Fork | Yes: fork a paused sandbox into many independent sandboxes | Not published; new servers are ordered and installed from an OS image |
| Outbound network controls | Open with no rules; deny-by-default once any host, IP, CIDR or wildcard rule exists, enforced on the host outside the VM | Open by default; optional stateless Robot firewall with incoming and outgoing rules |
| Billing granularity | Per second while running: $0.03616363/vCPU-hr, $0.01159025/GiB-hr, storage $0.0001584/GB-hr | Hourly, rounded up to full hours and capped monthly, plus a setup fee for most new servers |
| Largest size | 8 vCPU / 16 GB on Enterprise; 8 vCPU / 8 GB on Pro | AX162-3: 48-core AMD EPYC 9454P with up to 512 GB DDR5 ECC |
| GPU | None; no GPU shapes | Yes: GEX45 (RTX PRO 4000 Blackwell SFF), GEX63 and GEX131 (RTX PRO 6000 Blackwell Max-Q) |
Common Questions
Is Hetzner Dedicated traffic really free?
Yes for dedicated root servers: traffic is unlimited and free, except on servers with the 10G uplink add-on, and internal traffic is free too. CreateOS has no egress fees either, but caps each sandbox at a 50 GiB outbound budget by default unless you recharge.
Can I cancel a Hetzner dedicated server at any time?
Hetzner says cancellation through Robot is immediate only, and the AX42 page states no minimum contract term, though most new servers carry a one-off setup fee. A CreateOS sandbox is destroyed with one API call, and charges stop at that second.
Should I build agent sandboxes on a Hetzner dedicated server myself?
You can, if you are ready to build the isolation layer, networking and cleanup yourself, since a Hetzner dedicated server is single-tenant bare metal with root access. CreateOS gives each task its own Firecracker micro-VM with egress rules, pause and fork already in place.
Sources
Checked 17 October 2026.
- Hetzner Dedicated: product lines, auction, ISO 27001 locations
- Hetzner Dedicated: AX specs, unlimited traffic, IPv6 /64
- Hetzner Dedicated: AX42 specs, firewall, vSwitch, no minimum term, DPA
- Hetzner Dedicated: GPU servers
- Hetzner Dedicated: current monthly prices and setup fees
- Hetzner Dedicated: AX162 max RAM
- Hetzner Dedicated: IPv4 price
- Hetzner Dedicated: hourly billing, monthly cap, setup fees
- Hetzner Dedicated: cancellation semantics
- Hetzner Dedicated: auction mechanics, no setup fee
- Hetzner Dedicated: API
- CreateOS sandbox security
- CreateOS Sandbox pricing
- CreateOS egress rules
See CreateOS Sandbox for yourself
Book a demo, or explore the Sandbox and its pricing.