CreateOS Sandbox vs Google Agent Platform Sandbox
Google Agent Platform Sandbox suits Google Cloud customers who want agent code execution or a browser sandbox inside VPC Service Controls, CMEK and HIPAA, with a monthly free tier. CreateOS Sandbox suits agents that need outbound network access, package installs and a full Linux toolchain, which Code Execution does not allow, at a lower vCPU rate.
Pricing at a Glance
CreateOS rates verified 17 October 2026. Google Agent Platform Sandbox pricing as published on 17 October 2026. Rates billed per GB rather than per GiB, or as bundled sizes, are quoted as published rather than converted.
CreateOS Sandbox
Lower compute rate- Compute
- $0.0362 /vCPU-hr
- Memory
- $0.0116 /GiB-hr
Google Agent Platform Sandbox
- Compute
- $0.0850 /vCPU-hr
- Memory
- $0.0090 /GiB-hr
Google bills Agent Compute at $0.085 per vCPU-hour above 50 free hours a month and Agent Memory at $0.009 per GiB-hour above 100 free GiB-hours, rounded to the second, as of 17 October 2026.
Where CreateOS Sandbox Fits Better
What CreateOS Sandbox brings to this matchup, with a plain note on where Google Agent Platform Sandbox has the edge.
Outbound network with optional allowlists, where Code Execution sandboxes have no network access.
A full devbox:1 image with Python, Node.js, Go, Rust, Docker and five coding agents, where Code Execution allows no package installs.
$0.03616363 per vCPU-hour against Google's $0.085 list rate (Google's memory rate, $0.009 per GiB-hour, is lower than ours).
Fork from a paused sandbox; fork is not published for Google's sandboxes.
Where Google Agent Platform Sandbox is strong
Enterprise controls come built in (VPC Service Controls, CMEK, HIPAA) on Google Cloud billing, with a monthly free tier and a browser sandbox for computer-use agents beside code execution.
Which to Pick
Pick CreateOS Sandbox if
- Agent code must install packages or call external APIs.
- You want one sandbox type for code, shells and a desktop.
- You want SDKs in TypeScript, Go, Rust, C# or Java as well as Python.
Pick Google Agent Platform Sandbox if
- You need VPC Service Controls, CMEK or HIPAA on Google Cloud billing.
- Your agent runs self-contained Python and benefits from 50 free vCPU-hours a month.
- You want a managed browser sandbox reachable over CDP.
Head-to-Head Comparison
Every dimension side by side, checked on 17 October 2026 against each vendor's own docs and pricing pages. "Not published" means we could not find it on the vendor's pages, not that the feature is missing.
| Dimension | CreateOS Sandbox | Google Agent Platform Sandbox |
|---|---|---|
| Isolation | Firecracker micro-VM with its own guest kernel | Not published (vendor-stated: secure, isolated, managed sandbox; browser in a container) |
| Pause and resume | Pause saves disk, memory and CPU state; vCPU stops billing, memory and storage still bill | Code Execution keeps state up to 14 days with a TTL; snapshots not supported for Code Execution |
| Fork | Yes, fork a paused sandbox into many independent copies | Not published |
| Outbound network default | Open with no rules; deny-by-default once any host, IP, CIDR or wildcard rule exists, enforced on the host outside the VM | Code Execution: no network access. Computer Use: not published |
| Inbound access | Closed by default; opt-in public HTTPS URL | Computer Use: CDP WebSocket and noVNC view; Code Execution: none |
| Largest size | 8 vCPU / 16 GB on Enterprise; 8 vCPU / 8 GB on Pro | Not published |
| Concurrency | 1 / 5 / 20 / 30 by plan; paused sandboxes count toward the cap | Not published |
| Session length | No cap; idle auto-pause 60 s to 24 h, off by default | Code Execution state TTL up to 14 days; Computer Use not published |
| Billing | Per second: $0.03616363 per vCPU-hour, $0.01159025 per GiB-hour, storage $0.0001584 per GB-hour; no egress fees, 50 GiB bandwidth budget per sandbox | $0.085 per vCPU-hour, $0.009 per GiB-hour, per second, with a monthly free tier |
| SDKs and interfaces | TypeScript, Go, Python, Rust, C#, Java SDKs (all but TypeScript pre-1.0), CLI, MCP, REST | Agent Platform Python SDK, REST API, Playwright via CDP |
Common Questions
Can Google Code Execution sandboxes access the internet?
No. Code Execution has no network access, does not allow package installs and has a 100 MB I/O limit. CreateOS Sandbox allows outbound traffic by default and lets you restrict it to listed hosts, IPs or CIDRs.
Is there a free tier for Google Agent Platform Sandbox?
Yes: 50 vCPU-hours and 100 GiB-hours per month per account, plus $300 credit for new Google Cloud customers. The CreateOS Free plan gives 500 credits and one concurrent sandbox at up to 1 vCPU and 1 GB.
Which compliance controls does Google offer for Code Execution?
Google states VPC Service Controls, CMEK, data residency at rest and HIPAA, without Access Transparency or Access Approval. CreateOS is SOC 2 Type II and ISO 27001 certified, with reports available under NDA.
How long does Google keep Code Execution state?
Up to 14 days, with a configurable TTL. CreateOS Sandbox has no lifetime cap; a paused sandbox keeps disk, memory and CPU state until you resume, fork or destroy it.
Sources
Checked 17 October 2026.
See CreateOS Sandbox for yourself
Book a demo, or explore the Sandbox and its pricing.