CreateOS Sandbox vs STACKIT
STACKIT is built for German and Austrian enterprises, public bodies and automotive suppliers that need long-running VMs or H100 servers under C5 and TISAX. CreateOS Sandbox is built for running agent or untrusted code in a fresh micro-VM per task with per-second billing. If your rule is that data stays in Germany or Austria, STACKIT states that directly.
Pricing at a Glance
CreateOS rates verified 17 October 2026. STACKIT pricing as published on 17 October 2026. Rates billed per GB rather than per GiB, or as bundled sizes, are quoted as published rather than converted.
CreateOS Sandbox
- Compute
- $0.0362 /vCPU-hr
- Memory
- $0.0116 /GiB-hr
STACKIT
STACKIT's EU01 price list shows General Purpose Server-g1.2 (2 vCPU, 8 GB) at EUR 0.07582266667/hour net and its smallest Tiny Server-t1.1 at EUR 0.00304791667/hour, as of 17 October 2026.
Where CreateOS Sandbox Fits Better
What CreateOS Sandbox brings to this matchup, with a plain note on where STACKIT has the edge.
Resume in place: a paused CreateOS sandbox picks up with memory intact, while STACKIT snapshots cannot be restored in place and only seed new servers.
A Free plan with 500 credits and no card; STACKIT publishes no free tier.
Hostname allowlists for egress; STACKIT Security Groups restrict by protocol, port and IP or CIDR.
Where STACKIT is strong
EU-sovereign VMs run only in the operator's own German and Austrian data centers, with BSI C5 Type 2 and TISAX Level 3 attestations (vendor-stated), AMD SEV confidential VMs, and servers with up to 8x H100.
Which to Pick
Pick CreateOS Sandbox if
- Your agents need a disposable environment per task.
- You want pause and fork with memory state.
- You want to try it on a free plan before buying.
Pick STACKIT if
- Your contracts require BSI C5 Type 2 or TISAX on German or Austrian infrastructure.
- You need confidential computing with AMD SEV.
- You need H100, L40S or A100 GPU servers in the EU.
Head-to-Head Comparison
Every dimension side by side, checked on 17 October 2026 against each vendor's own docs and pricing pages. "Not published" means we could not find it on the vendor's pages, not that the feature is missing.
| Dimension | CreateOS Sandbox | STACKIT |
|---|---|---|
| Isolation | Firecracker micro-VM with its own guest kernel | Full VM on STACKIT hypervisors; AMD SEV confidential machine types |
| Create and destroy by API | Yes: REST API, CLI, MCP server and SDKs for TypeScript, Go, Python, Rust, C# and Java (all but TypeScript pre-1.0) | Yes: IaaS API, stackit-cli, Terraform, Pulumi, Go, Python and Java SDKs |
| Memory snapshot (pause and resume) | Yes: disk, memory and CPU state saved; vCPU stops billing, memory and storage still bill | Not documented; volume and server snapshots used to create new resources |
| Fork | Yes: fork a paused sandbox into many independent sandboxes | Indirect: snapshot volumes and create a new server; no live fork |
| Outbound network controls | Open with no rules; deny-by-default once any host, IP, CIDR or wildcard rule exists, enforced on the host outside the VM | Open: a new Security Group allows all outbound; rules by protocol, port and IP/CIDR |
| Billing granularity | Per second while running: $0.03616363/vCPU-hr, $0.01159025/GiB-hr, storage $0.0001584/GB-hr | Hourly pay-as-you-go, per billing unit or part thereof |
| Largest size | 8 vCPU / 16 GB on Enterprise; 8 vCPU / 8 GB on Pro | c3i.112: 112 vCPU / 236 GB; b2i.36d: 36 vCPU / 952 GB |
| GPU | None; no GPU shapes | Yes: A100, L40S, H100 (up to 8 per server) |
Common Questions
Where does STACKIT host its virtual machines?
In two regions, EU01 in Germany and EU02 in Austria, run in the operator's own data centers. CreateOS runs sandboxes in two managed regions, eu and us, selected when you create each sandbox.
Does STACKIT block outbound traffic by default?
No. STACKIT's docs say a new Security Group allows all outbound traffic and blocks inbound except from members of the same group. CreateOS is also open outbound until you add a rule; after that it is deny-by-default and enforced on the host, so code in the sandbox cannot change it.
Which audits do STACKIT and CreateOS publish?
STACKIT lists BSI C5 Type 2, ISAE 3000 (SOC 2), ISAE 3402 and TISAX Level 3, with ISO 27001-certified data centers (vendor-stated). CreateOS is SOC 2 Type II and ISO 27001 certified, with reports available under NDA.
Sources
Checked 17 October 2026.
- STACKIT: product description, hourly price table, regions
- STACKIT: price list incl. GPU and public IP
- STACKIT: machine types, GPU, AMD SEV, max shapes
- STACKIT: egress/ingress defaults
- STACKIT: internal IPs by default, snapshots
- STACKIT: compliance
- STACKIT: SDKs, CLI, Terraform
- CreateOS pause, resume and fork
- CreateOS egress rules
- CreateOS Sandbox limits
See CreateOS Sandbox for yourself
Book a demo, or explore the Sandbox and its pricing.