Note: Using gVisor? You can add yourself to this page, contact [email protected].

This page lists companies and organizations that are known to use gVisor. This does not constitute an endorsement.

---

Companies and organizations using gVisor

3B

Tines 3B is an AI-native platform for building agents, apps, and automations. It gives IT and security teams the visibility and control to govern that work.

gVisor gives 3B a strong isolation boundary for running untrusted code. We use checkpoint and restore to start each execution in a fresh, single-use sandbox. Its filesystem extension points let us present durable, versioned storage as familiar files and directories, while its network stack helps us control each step’s network access and bandwidth.

---

Ant Group

Ant Group, develops online payment platforms. The company offers a wide range of financial services to consumers and businesses worldwide.

At Ant Group, we are committed to keeping online transactions safe and efficient. Continuously improving security for potential system-level attacks is one of many measures. As a container runtime, gVisor provides container-native security without sacrificing resource efficiency. Therefore, it has been on our radar since it was released.

Read Ant Group’s blog post on running gVisor in production at scale (source).

---

Anthropic

Anthropic is a leading AI safety and research company. They are known for building reliable, interpretable, and steerable AI systems.

Anthropic is a regular open-source contributor to gVisor. They use gVisor to securely contain code execution within claude.ai.

The hypervisor, seccomp, and gVisor across our products have been dependable. (How we contain Claude across products)

---

Beam

Beam is a cloud platform for running application workloads on GPUs and serverless CPUs, specializing in stateful code execution sandboxes for AI agents.

Beam combines stateful snapshots, gVisor isolation, GPU acceleration, and bring-your-own-compute so agents operate against a continuous, secure, production-grade workspace. (Best Stateful Sandboxes for Code Execution in 2026)

---

Blink

Blink is a company that specializes in security automation and orchestration powered by generative AI.

Blink uses gVisor to run pods with full isolation including system calls (source).

---

Cloudflare

Cloudflare is a content delivery network (CDN) and cloud computing security company. It provides a range of services to businesses of all sizes.

It takes just a few seconds for a new gVisor container to start up and begin executing meaningful work in a secure sandbox with near native performance. (A new era for Cloudflare Pages builds)

---

Deductive AI

Deductive AI builds AI SRE agents for investigating production systems.

Deductive uses gVisor as the compute isolation boundary for disposable sandboxes that execute agent-generated code, combined with Cilium network isolation and direct mTLS communication. (Building Secure Sandboxes for AI Agent Execution)

---

DigitalOcean

DigitalOcean is a cloud computing provider that offers cloud infrastructure services to developers and businesses.

DigitalOcean uses gVisor in App Platform as a container runtime sandbox (source).

---

Docker

Docker is a popular container management engine.

Docker for Mac uses the gVisor network stack library for better performance than vpnkit. Note that on Docker for Linux, you can use gVisor as a container runtime.

---

Freedom of the Press Foundation

The Freedom of the Press Foundation is a non-profit supporting free speech and freedom of the press.

The Dangerzone application converts potentially dangerous PDFs, office documents, or images and convert them to safe PDFs for use by journalists. The document conversion process runs in a gVisor sandbox.

---

Google

gVisor was designed and developed to efficiently isolate production workloads at scale for Google services. There are millions of gVisor sandbox instances running daily. gVisor powers Google Cloud offerings GKE Sandbox, Cloud Run, App Engine, and more.

---

Grist

Grist combines the flexibility and familiarity of spreadsheets with the power of databases.

Grist uses gVisor to isolate documents from each other and the network (source).

---

Modal

Modal is a cloud platform that simplifies the execution and management of various computing workloads for data teams and application developers (particularly those working in the field of generative AI).

Compute jobs at Modal are containerized and virtualized using gVisor. (Security at Modal.)

Modal labs tweeted about fully running on gVisor (source).

---

Northflank

Northflank is a developer platform that simplifies building, deploying, and scaling applications, databases, and jobs.

Northflank uses gVisor to run GPU workloads inside sandboxed environments when nested virtualization is unavailable on the underlying infrastructure. (GPU sandboxes: isolation models and platform support in 2026).

---

OpenAI

OpenAI develops Artificial Intelligence systems.

OpenAI uses gVisor for “some higher-risk tasks”, such as code execution.

---

Snowflake

Snowflake provides a cloud-based AI Data platform that lets organizations store, analyze, and share large amounts of data across different plublic cloud services.

Snowflake uses gVisor for the Snowpark execution sandbox to safely run untrusted user code (such as Python stored procedures and user-defined functions) in a multi-tenant environment.

---

Tailscale

Tailscale provides a mesh-based VPN service designed to simplify secure networking between devices and servers.

In userspace mode, Tailscale uses the gVisor netstack library, implementing networking in userspace. (Kernel vs. netstack subnet routing & exit nodes.)

---

Wordfully

Wordfully provides grammar checking, rephrasing, and tone suggestions. It uses gVisor to isolate containerized backend workloads.