Key takeaways
- Enterprise-grade platform with VPC/BYOC deployment across AWS, GCP, Azure, Oracle, and Civo
- GPU support from L4 at $0.80/hour to H100 at $2.74/hour, with B200s available — up to 62% cheaper than major clouds
- Flexible ephemeral or persistent modes with microVM (Kata Containers) and gVisor isolation; 80k+ developers in production as of June 2026
FAQ
What is Northflank?
Northflank is a developer platform that provides secure microVM sandboxes for running untrusted code at scale, with options to deploy in their cloud or your own VPC.
How much does Northflank cost?
CPU costs $0.01667/vCPU-hour, memory $0.00833/GB-hour. GPUs range from $0.80/hour (L4) to $3.00/hour (RTX PRO 6000), with H100s at $2.74/hour. Free sandbox tier available.
Who competes with Northflank?
E2B, Modal, Daytona, Runloop, and Fly.io Sprites compete in the AI sandbox space. Northflank differentiates with VPC deployment and GPU support.
Executive Summary
Northflank is an enterprise-grade developer platform that provides secure microVM sandboxes for running AI agent workloads, with the unique ability to deploy in their managed cloud or your own VPC across AWS, GCP, Azure, Oracle, and Civo. The platform has been running millions of microVMs monthly since 2021 and is trusted by companies like Sentry and Writer.
| Attribute | Value |
|---|---|
| Company | Northflank |
| Founded | 2019 |
| Funding | $24.9M ($16M Series A led by Bain Capital Ventures, Nov 2024) |
| Developers | 80k+ in production (as of June 2026) |
| Headquarters | London, UK |
Product Overview
Northflank provides secure sandboxed environments for running untrusted AI-generated code at scale using microVMs with hardware-level or gVisor isolation. Unlike pure-play sandbox providers, Northflank is a full-stack developer platform that includes databases, CI/CD, and GPU workloads alongside sandbox capabilities.
The platform differentiates primarily on enterprise deployment flexibility — teams can run sandboxes in Northflank's managed cloud or deploy into their own VPC while maintaining the same APIs and developer experience.
Key Capabilities
| Capability | Description |
|---|---|
| Sub-second Creation | Boot microVMs in under 1 second (~200ms claimed) |
| Dual Isolation | Choose microVMs (Kata Containers, hardware-level) or gVisor (kernel-level) |
| VPC Deployment | Deploy in your own AWS, GCP, Azure, Oracle, or Civo account |
| GPU Support | H100, B200, A100, and fractional GPUs with full microVM isolation |
| Persistent Storage | Volumes from 4GB to 64TB, S3-compatible object storage |
| Horizontal Autoscaling | Scale based on CPU, memory, and RPS thresholds |
Product Surfaces / Editions
| Surface | Description | Availability |
|---|---|---|
| Northflank Cloud | Managed multi-tenant cloud | GA |
| BYOC (VPC) | Deploy in your cloud account | GA |
| Enterprise | Custom requirements, SLAs, white-label | Contact |
Market Position
Comparison with Competitors
| Feature | Northflank | E2B | Modal | Daytona |
|---|---|---|---|---|
| Isolation | microVM/gVisor | Firecracker | gVisor | Docker |
| VPC/BYOC | ✅ | — | — | ✅ (self-host) |
| GPU Support | ✅ | — | ✅ | — |
| Ephemeral + Persistent | ✅ | Ephemeral only | Ephemeral | Persistent |
| Open Source | — | ✅ | — | ✅ |
| Computer Use | — | — | — | ✅ |
Differentiation: Northflank is the only platform combining enterprise VPC deployment with GPU support and flexible ephemeral/persistent modes. E2B leads on adoption and open-source community; Modal leads on serverless Python; Daytona leads on Computer Use.
Target Segments
| Segment | Fit | Notes |
|---|---|---|
| Enterprise AI teams | ⭐⭐⭐ | VPC deployment, SOC2, enterprise features |
| GPU-heavy workloads | ⭐⭐⭐ | H100s 62% cheaper than big clouds |
| Startups | ⭐⭐ | May be overkill; E2B simpler for pure sandboxes |
| Open-source preference | ⭐ | Not open-source; E2B or Daytona better fit |
Pricing
Northflank uses usage-based pricing with transparent per-resource costs.
Compute Pricing
| Resource | Price |
|---|---|
| CPU | $0.01667/vCPU-hour |
| Memory | $0.00833/GB-hour |
| Disk (SSD) | $0.15/GB/month |
| Network Egress | $0.06/GB |
GPU Pricing
| GPU | Price/Hour |
|---|---|
| L4 24GB | $0.80 |
| A100 40GB | $1.42 |
| A100 80GB | $1.76 |
| H100 80GB | $2.74 |
| RTX PRO 6000 96GB | $3.00 |
GPU pricing is up to 62% cheaper than AWS, GCP, and Azure equivalents. B200s are also offered, with spot-instance orchestration and fractional GPU support.
Example Monthly Costs
| Workload | Specs | Monthly Cost |
|---|---|---|
| Light sandbox | 0.5 vCPU, 1GB RAM, 10hrs/day | ~$4 |
| Standard agent | 2 vCPU, 4GB RAM, 8hrs/day | ~$20 |
| GPU workload | H100, 4hrs/day | ~$330 |
Technical Architecture
Isolation Model
Northflank offers two isolation technologies:
microVMs (Hardware-level, via Kata Containers):
- Each workload runs in its own lightweight VM
- Complete kernel isolation from host and other tenants
- Best for untrusted code execution and multi-tenant platforms
gVisor (Kernel-level):
- Application kernel intercepts syscalls
- Lower overhead than full VMs
- Good balance of security and performance
Infrastructure
| Component | Implementation |
|---|---|
| Orchestration | Kubernetes (EKS, GKE, AKS, or self-managed) |
| Networking | Service mesh with mTLS |
| Storage | Persistent volumes, S3-compatible object storage |
| CI/CD | Built-in pipelines with GitHub, GitLab, Bitbucket |
Viability Assessment
| Factor | Rating | Notes |
|---|---|---|
| Market Position | ⭐⭐⭐ | Strong in enterprise/VPC segment |
| Funding | ⭐⭐⭐ | $24.9M raised (seed + Series A), sustainable |
| Customer Base | ⭐⭐⭐ | Sentry, Writer, 80k+ developers, 2,000+ startups and enterprises |
| Technical Moat | ⭐⭐ | BYOC is differentiator but replicable |
| Product Velocity | ⭐⭐⭐ | Active development since 2019 |
| Ecosystem | ⭐⭐ | Less dev community than E2B |
Overall Viability: Strong — Northflank has carved out a defensible position in enterprise deployments. The combination of VPC support, GPU access, and full-stack platform capabilities makes it sticky for teams that need more than just sandboxes.
Use Cases
1. Enterprise AI Agent Execution
Deploy secure sandboxes in your own VPC to meet compliance requirements while running untrusted AI-generated code.
2. GPU-Intensive Agent Workloads
Run ML inference, model fine-tuning, or compute-heavy agent tasks with H100s at competitive pricing.
3. Multi-Cloud Agent Infrastructure
Deploy the same agent infrastructure across AWS, GCP, and Azure using consistent APIs.
What Developers Say
Community sentiment on Hacker News skews positive on pricing and support, with friction around account management and scaling clarity:
"I find the pricing to be very reasonable and considerably cheaper than Heroku." — charlieegan3, Hacker News
"I really like how they organise things and their support so far has been amazing." — almost, Hacker News
"Do you see a way to delete your account in your account settings? I can't find it." — dizhn, Hacker News
Note: dedicated discussion of Northflank's AI sandbox product (vs. its PaaS roots) remains thin on Reddit and X as of June 2026; most community commentary frames it as a Heroku/Fly.io alternative.
Bottom Line
Recommended for:
- Enterprise teams requiring VPC/BYOC deployment
- GPU workloads where cost matters (up to 62% savings vs big clouds)
- Teams wanting sandboxes + databases + CI/CD in one platform
Not recommended for:
- Teams that want open-source (E2B, Daytona)
- Computer Use / browser automation workflows (Daytona)
- The simplest possible SDK for ephemeral execution (E2B)
Outlook: With $24.9M raised, 80k+ developers, and a defensible enterprise/VPC niche, Northflank looks durable — but it remains a full-stack platform first, and pure-play sandbox rivals iterate faster on agent-specific DX.
Related Research
- AI Agent Sandboxes Compared — Full market comparison
- E2B — Market leader for ephemeral sandboxes
- Modal — Serverless Python with GPUs
- Daytona — Fastest creation, Computer Use support