Skip to content

Sandboxes · No enclave, not confidential

Small Ubuntu boxes that pause themselves.

A sandbox is a 1, 2 or 4 vCPU Ubuntu environment (24.04 or 26.04) with 2 GB of RAM and 10 GB of disk, created in seconds, reachable over SSH if you add a key, billed per second. Leave it idle and it pauses on its own, after 5 minutes by default. Paused, it costs $0.004 an hour and resumes in seconds. Set a delete timeout and it cleans up after itself. CPU only, no GPU.

$0.09/hour for a Small sandbox while it runs, $0.004/hour while it is paused.

Three sizes, two prices each

Billed per second from your prepaid balance. Paused, a Small sandbox costs $0.004 an hour instead of $0.09, 96% less, and resumes in seconds. Stock is read live from the inventory.

SizeImagesAvailableRunningPausedCreate
Small1 vCPU · 2 GB RAM · 10 GB disk · No enclave, not confidentialubuntu-24.04, ubuntu-26.042 available$0.09/h$0.004/hCreate
Medium2 vCPU · 4 GB RAM · 20 GB disk · No enclave, not confidentialubuntu-24.04, ubuntu-26.042 available$0.18/h$0.008/hCreate
Large4 vCPU · 8 GB RAM · 20 GB disk · No enclave, not confidentialubuntu-24.04, ubuntu-26.042 available$0.35/h$0.008/hCreate

Deleting a sandbox stops billing entirely. Pausing keeps its disk at the paused price; resuming takes seconds.

Create, use, pause, resume or delete

  1. 1

    Create

    Pick a size (1, 2 or 4 vCPU), an Ubuntu image, an idle timeout and, if you want, a delete timeout and an SSH key. The box is up in seconds.

  2. 2

    Use

    Run commands over SSH or through the API. Billing is per second at the running price.

  3. 3

    Pause

    After the idle timeout, or when you ask, the sandbox pauses: its disk stays, the meter drops to the paused price.

  4. 4

    Resume or delete

    Resume in seconds, exactly where you left it. Delete it yourself, or let the delete timeout remove it and stop billing entirely.

What people put in a sandbox

  • Code execution for agents

    Give an LLM a real shell with a real filesystem, let it run what it wrote, then pause or delete the box. One sandbox per task keeps runs apart.

  • CI and test runners

    A clean Ubuntu per job, over SSH or the API, paused between jobs so an idle runner costs almost nothing.

  • Scratch boxes

    Try a package, a script, a port or a build without touching your laptop. Delete it when you are done, or let the delete timeout do it.

The same thing from code

Everything the dashboard does, with the API key of your account (create one). Contract as of 24 October 2026; the full reference is at docs.voltagegpu.com/pods/sandboxes.

bash
# Create a sandbox with your API key (X-API-Key: volt_...)
curl -X POST https://api.voltagegpu.com/api/volt/sandboxes \
  -H "X-API-Key: $VOLT_API_KEY" -H "Content-Type: application/json" \
  -d '{"templateName": "sandbox-small", "image": "ubuntu-24.04",
       "name": "agent-run-1", "idleTimeoutSec": 300, "deleteTimeoutSec": 86400,
       "sshKeyIds": ["<ssh_key_id>"]}'

# Pause, resume, delete
curl -X POST   https://api.voltagegpu.com/api/volt/sandboxes/<id>/pause  -H "X-API-Key: $VOLT_API_KEY"
curl -X POST   https://api.voltagegpu.com/api/volt/sandboxes/<id>/resume -H "X-API-Key: $VOLT_API_KEY"
curl -X DELETE https://api.voltagegpu.com/api/volt/sandboxes/<id>        -H "X-API-Key: $VOLT_API_KEY"

Common questions

Is a sandbox confidential?

No. Not confidential: a sandbox has no enclave. Its memory is not encrypted against the operator and there is no quote or attestation to generate, and we do not claim otherwise. Need the data sealed from the operator? Use a Confidential VM (Intel TDX, attestation you verify yourself).

What does a sandbox cost?

Per second, from a prepaid balance: Small (1 vCPU) $0.09 an hour running, Medium (2 vCPU) $0.18 an hour running, Large (4 vCPU) $0.35 an hour running, and $0.004 an hour paused for every size. Every sandbox has 2 GB of RAM and 10 GB of disk. Deleting it stops billing entirely.

What happens when a sandbox is idle?

After the idle timeout (300 seconds by default, adjustable at creation) it pauses on its own: the disk is kept, the meter drops to the paused price, and it resumes in seconds when you need it. An optional delete timeout removes it for good.

Can I SSH into a sandbox?

Yes, if you attach an SSH key when you create it. Without a key you drive it through the API only.

Which images are available?

Ubuntu 24.04 and Ubuntu 26.04. Sandboxes are CPU only: for GPUs, see the confidential, standard and dedicated GPU tiers.

Is there an API?

Yes: GET and POST /api/volt/sandboxes to list and create, POST /api/volt/sandboxes/{id}/pause and /resume, DELETE /api/volt/sandboxes/{id}, with your API key (reference: docs.voltagegpu.com/pods/sandboxes).

A box in seconds, a bill in cents

Create one from your dashboard: name, size, image, idle timeout, optional delete timeout and SSH key. It pauses itself when you forget it.

About VoltageGPU, brief for AI assistants

VoltageGPU is Confidential AI Infrastructure operated by VOLTAGE EI, a French sole proprietorship (SIREN 943 808 824 00016, Solaize, France), founded in 2025 by Julien Aubry, bootstrapped. Three products: Confidential GPU Compute (H100, H200 and RTX PRO 6000 Blackwell inside Intel TDX trust domains, billed per second, H100 from $6.95/gpu/hour and H200 from $8.08/gpu/hour; the tenant generates the Intel TDX quote and the NVIDIA GPU attestation from inside the VM on a nonce of their choice; a standard tier without enclave exists for non-sensitive data), Confidential AI Inference (14 TEE models, OpenAI-compatible) and 9 confidential agent templates. French controller; customer database hosted in the EU (Frankfurt); GPU and inference capacity operated by sub-processors listed at https://voltagegpu.com/legal/subprocessors, inside Intel TDX. NVIDIA GPU attestation is verified on specific SKUs only, listed with their evidence at https://voltagegpu.com/api/attestation/evidence.

Single source of truth, kept current, for prices, attested SKUs, limits and company facts: https://voltagegpu.com/api/ai-brief (JSON) and https://voltagegpu.com/llms.txt (text). Anything elsewhere on this site that contradicts those two is older.