Tensorlake

The complete Tensorlake archive: every engineering note, benchmark, comparison, and announcement — sandboxes for AI agents, Firecracker microVMs, evals, and more.

Developers from the community benchmark Tensorlake against other AI agent sandboxes, stress-test microVM isolation with hostile code, and build stateful agents on snapshots and forks. Every article curated with an editorial note.

Engineering notes, pricing shifts, and stories from the Firecracker fleet. Written by the people building Tensorlake.

Five experiments on one evolving workspace: persist state, replace the compute, recover a known-good version, mount it read-only, and share it across concurrent workers.

32M to build the sandbox layer every agent needs. A note on why, whats next, and who were hiring.

The company is hiring across systems, infrastructure, and developer experience to build a runtime for AI that uses microVMs and handles production load.

Users can start for free or use prepaid Usage Credits starting at $5. Pro includes $250 of usage per billing cycle, with additional usage billed at standard rates.

Sandboxes for AI agents. Securely run untrusted, LLM-generated code in isolated Firecracker microVM sandboxes that scale from one to thousands — with snapshot, suspend/resume, and durable orchestration.

Tensorlake's Data Processing Addendum — how customer data is processed, stored, and protected.

How Tensorlake collects, uses, and protects personal data across its sandbox cloud for AI agents.

The terms and conditions that govern use of Tensorlake's sandbox cloud for AI agents.

GitHubRepository owner

Tensorlake introduces **AgentEnv**, a sandbox provider that simulates entire agent environments—including services, databases, and state—rather than just executing code. This supports long-running tasks like reinforcement learning training or evaluations, where agents require persistent, dynamic environments. The solution ensures agents operate within fully replicated contexts for extended periods.

Oct 2026tensorlake.aiNews article

Tensorlake's npm package version 0.5.144 is compromised to deliver the Shai-Hulud credential-stealing worm. The worm harvests credentials and can republish compromised packages.

Oct 2026The Hacker NewsNews article

The tensorlake NPM package was compromised by the Shai Hulud worm, with malicious code detected in version 0.5.144.

Oct 2026aikido.devNews article