K8E — Open Source Agentic AI Sandbox Matrix

K8E is the Open Source Agentic AI Sandbox Matrix — a Kubernetes-native platform for running secure, isolated AI agent workloads at scale, packaged as a single binary under 100MB.

As autonomous AI agents increasingly generate and execute untrusted code, robust sandboxing infrastructure is no longer optional. K8E ships everything needed to spin up a production-grade cluster in under 60 seconds, with first-class primitives for agent isolation, resource governance, and persistent execution environments — purpose-built for the AI era.

What Makes K8E Different

  • đŸ“Ļ Single binary < 100MB — a CNCF-conformant Kubernetes distribution in one file
  • ⚡ Up in 60 seconds — curl -sfL https://k8e.sh/install.sh | sh -
  • 🔒 Secure isolated execution — gVisor (default), Kata Containers, Firecracker microVM
  • 🌐 Network policy built in — Cilium eBPF toFQDNs per-session egress control
  • 🤝 agent-sandbox compatible — works with kubernetes-sigs/agent-sandbox
  • đŸ–Ĩī¸ Multi-architecture — x86_64, ARM64, RISC-V

Try It

curl -sfL https://k8e.sh/install.sh | sh -

Then connect your AI agent (Claude Code, Codex, or Pi) with the standalone k8e-sandbox-cli. See the Getting Started guide.

Last Updated: