visor/website/users/index.html

---
title: Who's Using gVisor
layout: base
---

<div class="container">
  <div class="users-content">
    <h1>{{ page.title }}</h1>
    <div class="panel panel-default">
      <div class="panel-body">
        <strong>Note:</strong>
        <span>
          Using gVisor? You can add yourself to this page, contact
          <a href="mailto:[email protected]"> [email protected]</a>
        </span>
      </div>
    </div>
    <!-- end panel -->
    <p>
      This page lists companies that are known to use gVisor. This does not constitute an
      endorsement.
    </p>
    <h1>Companies using gVisor</h1>
    <hr />
    <!-- 3B -->
    <div class="row display-flex no-space">
      <div class="col-md-8">
        <h2>
          <a href="https://www.tines.com/3b/" class="feature-link"> 3B </a>
        </h2>
        <p class="info-text">
          Tines 3B is an AI-native platform for building agents, apps, and automations. It gives IT
          and security teams the visibility and control to govern that work.
        </p>
        <div class="panel panel-default">
          <div class="panel-body">
            <p class="info-users-text">
              gVisor gives 3B a strong isolation boundary for running untrusted code. We use
              checkpoint and restore to start each execution in a fresh, single-use sandbox. Its
              filesystem extension points let us present durable, versioned storage as familiar
              files and directories, while its network stack helps us control each step's network
              access and bandwidth.
            </p>
          </div>
        </div>
        <!-- end panel -->
      </div>
      <div class="col-md-4">
        <div>
          <img
            src="/assets/logos/tines_logo.svg"
            alt="Tines logo"
            title="Tines logo"
            class="img-responsive img-vert-center"
          />
        </div>
      </div>
    </div>
    <hr />
    <!-- Ant Group -->
    <div class="row display-flex no-space">
      <div class="col-md-12">
        <h2>
          <a href="https://www.antgroup.com/en" class="feature-link"> Ant Group </a>
        </h2>
        <p class="info-users-text">
          Ant Group, develops online payment platforms. The company offers a wide range of financial
          services to consumers and businesses worldwide.
        </p>
        <div class="panel panel-default">
          <div class="panel-body">
            <p class="info-users-text">
              At Ant Group, we are committed to keeping online transactions safe and efficient.
              Continuously improving security for potential system-level attacks is one of many
              measures. As a container runtime, gVisor provides container-native security without
              sacrificing resource efficiency. Therefore, it has been on our radar since it was
              released.
            </p>
          </div>
        </div>
        <!-- end panel -->
        <p class="info-users-text">
          Read Ant Group's blog post on running gVisor in production at scale (<a
            href="/blog/2021/12/02/running-gvisor-in-production-at-scale-in-ant/"
            >source</a
          >).
        </p>
      </div>
    </div>
    <hr />
    <!-- Anthropic -->
    <div class="row display-flex no-space">
      <div class="col-md-8">
        <h2>
          <a href="https://www.anthropic.com/" class="feature-link"> Anthropic </a>
        </h2>
        <p class="info-text">
          Anthropic is a leading AI safety and research company. They are known for building
          reliable, interpretable, and steerable AI systems.
        </p>
        <p class="info-users-text">
          Anthropic is a regular open-source contributor to gVisor. They use gVisor to securely
          contain code execution within claude.ai.
        </p>
        <div class="panel panel-default">
          <div class="panel-body">
            <p class="info-users-text">
              The hypervisor, seccomp, and gVisor across our products have been dependable. (<a
                href="https://www.anthropic.com/engineering/how-we-contain-claude"
                >How we contain Claude across products</a
              >)
            </p>
          </div>
        </div>
        <!-- end panel -->
      </div>
      <div class="col-md-4">
        <div>
          <img
            src="/assets/logos/anthropic_logo.png"
            alt="Anthropic logo"
            title="Anthropic logo"
            class="img-responsive img-vert-center"
          />
        </div>
      </div>
    </div>
    <hr />
    <!-- Beam -->
    <div class="row display-flex no-space">
      <div class="col-md-8">
        <h2>
          <a href="https://www.beam.cloud/" class="feature-link"> Beam </a>
        </h2>
        <p class="info-text">
          Beam is a cloud platform for running application workloads on GPUs and serverless CPUs,
          specializing in stateful code execution sandboxes for AI agents.
        </p>
        <div class="panel panel-default">
          <div class="panel-body">
            <p class="info-users-text">
              Beam combines stateful snapshots, gVisor isolation, GPU acceleration, and
              bring-your-own-compute so agents operate against a continuous, secure,
              production-grade workspace. (<a
                href="https://www.beam.cloud/blog/best-stateful-sandbox-code-execution-2026"
                >Best Stateful Sandboxes for Code Execution in 2026</a
              >)
            </p>
          </div>
        </div>
        <!-- end panel -->
      </div>
      <div class="col-md-4">
        <div>
          <img
            src="/assets/logos/logo_beam.png"
            alt="Beam logo"
            title="Beam logo"
            class="img-responsive img-vert-center"
          />
        </div>
      </div>
    </div>
    <hr />
    <!-- Blink -->
    <div class="row display-flex no-space">
      <div class="col-md-12">
        <h2>
          <a href="https://www.blinkops.com/" class="feature-link"> Blink </a>
        </h2>
        <p class="info-text">
          Blink is a company that specializes in security automation and orchestration powered by
          generative AI.
        </p>
        <p class="info-users-text">
          Blink uses gVisor to run pods with full isolation including system calls (<a
            href="https://www.blinkops.com/blog/run-containers-securely-with-gvisor-on-eks"
            >source</a
          >).
        </p>
      </div>
    </div>
    <hr />
    <!-- Cloudflare -->
    <div class="row display-flex no-space">
      <div class="col-md-12">
        <h2>
          <a href="https://www.cloudflare.com" class="feature-link"> Cloudflare </a>
        </h2>
        <p class="info-users-text">
          Cloudflare is a content delivery network (CDN) and cloud computing security company. It
          provides a range of services to businesses of all sizes.
        </p>
        <div class="panel panel-default">
          <div class="panel-body">
            <p class="info-users-text">
              It takes just a few seconds for a new gVisor container to start up and begin executing
              meaningful work in a secure sandbox with near native performance. (<a
                href="https://blog.cloudflare.com/cloudflare-pages-build-improvements/"
                >A new era for Cloudflare Pages builds</a
              >)
            </p>
          </div>
        </div>
        <!-- end panel -->
      </div>
    </div>
    <hr />
    <!-- Deductive AI -->
    <div class="row display-flex no-space">
      <div class="col-md-8">
        <h2>
          <a href="https://deductive.ai/" class="feature-link">
            Deductive AI
          </a>
        </h2>
        <p class="info-text"> Deductive AI builds AI SRE agents for
          investigating production systems.
        </p>
        <div class="panel panel-default">
          <div class="panel-body">
              <p class="info-users-text"> Deductive uses gVisor as the compute
                isolation boundary for disposable sandboxes that execute
                agent-generated code, combined with Cilium network isolation and
                direct mTLS communication.
                (<a href="https://deductive.ai/blogs/building-secure-sandboxes-for-ai-agent-execution">Building Secure Sandboxes for AI Agent Execution</a>)
              </p>
          </div>
        </div> <!-- end panel -->
      </div>
      <div class="col-md-4">
        <div>
          <img
            src="/assets/logos/deductive_ai_logo.svg"
            alt="Deductive AI logo"
            title="Deductive AI logo"
            class="img-responsive img-vert-center"
            style="min-width: 85%; max-height: 120px;" />
        </div>
      </div>
    </div>
    <hr />
    <!-- DigitalOcean -->
    <div class="row display-flex no-space">
      <div class="col-md-12">
        <h2>
          <a href="https://www.digitalocean.com/" class="feature-link"> DigitalOcean </a>
        </h2>
        <p class="info-text">
          DigitalOcean is a cloud computing provider that offers cloud infrastructure services to
          developers and businesses.
        </p>
        <p class="info-users-text">
          DigitalOcean uses gVisor in
          <a href="https://docs.digitalocean.com/products/app-platform/">App Platform</a>
          as a container runtime sandbox (<a
            href="https://docs.digitalocean.com/products/app-platform/details/limits/"
            >source</a
          >).
        </p>
      </div>
    </div>
    <hr />
    <!-- Docker -->
    <div class="row display-flex no-space">
      <div class="col-md-12">
        <h2>
          <a href="https://www.docker.com/" class="feature-link"> Docker </a>
        </h2>
        <p class="info-text">Docker is a popular container management engine.</p>
        <p class="info-users-text">
          Docker for Mac
          <a href="https://docs.docker.com/desktop/release-notes/#4190"
            >uses the gVisor network stack library</a
          >
          for better performance than <code>vpnkit</code>. Note that on Docker for Linux, you can
          <a href="/docs/user_guide/quick_start/docker/">use gVisor as a container runtime</a>.
        </p>
      </div>
    </div>
    <hr />
    <!-- Freedom of the Press Foundation -->
    <div class="row display-flex no-space">
      <div class="col-md-8">
        <h2>
          <a href="https://freedom.press/" class="feature-link">
            Freedom of the Press Foundation
          </a>
        </h2>
        <p class="info-text">
          The Freedom of the Press Foundation is a non-profit supporting free speech and freedom of
          the press.
        </p>
        <p class="info-users-text">
          The <a href="https://dangerzone.rocks/">Dangerzone</a> application converts potentially
          dangerous PDFs, office documents, or images and convert them to safe PDFs for use by
          journalists. The document conversion process runs in a
          <a href="https://github.com/freedomofpress/dangerzone/blob/main/docs/developer/gvisor.md">
            gVisor sandbox</a
          >.
        </p>
      </div>
      <div class="col-md-4">
        <div>
          <img
            src="/assets/logos/freedom_of_the_press_foundation.svg"
            alt="Freedom of the Press Foundation logo"
            title="Freedom of the Press Foundation logo"
            class="img-responsive img-vert-center"
            style="min-width: 90%"
          />
        </div>
      </div>
    </div>
    <hr />
    <!-- Google -->
    <div class="row display-flex no-space">
      <div class="col-md-8">
        <h2>
          <a href="https://www.google.com" class="feature-link"> Google </a>
        </h2>
        <p class="info-text">
          gVisor was designed and developed to efficiently isolate production workloads at scale for
          Google services. There are millions of gVisor sandbox instances running daily. gVisor
          powers Google Cloud offerings
          <a href="https://cloud.google.com/kubernetes-engine/docs/concepts/sandbox-pods">
            GKE Sandbox</a
          >, <a href="https://cloud.google.com/run">Cloud Run</a>,
          <a href="https://cloud.google.com/appengine">App Engine</a>, and more.
        </p>
      </div>
      <div class="col-md-4">
        <div>
          <img
            src="/assets/logos/logo_goog.png"
            alt="Google logo"
            title="Google logo"
            class="img-responsive img-vert-center"
          />
        </div>
      </div>
    </div>
    <hr />
    <!-- Grist -->
    <div class="row display-flex no-space">
      <div class="col-md-12">
        <h2>
          <a href="https://www.getgrist.com/" class="feature-link"> Grist </a>
        </h2>
        <p class="info-text">
          Grist combines the flexibility and familiarity of spreadsheets with the power of
          databases.
        </p>
        <p class="info-users-text">
          Grist uses gVisor to isolate documents from each other and the network (<a
            href="https://support.getgrist.com/self-managed/#how-do-i-sandbox-documents"
            >source</a
          >).
        </p>
      </div>
    </div>
    <hr />
    <!-- Modal -->
    <div class="row display-flex no-space">
      <div class="col-md-8">
        <h2>
          <a href="https://www.modal.com" class="feature-link"> Modal </a>
        </h2>
        <p class="info-users-text">
          Modal is a cloud platform that simplifies the execution and management of various
          computing workloads for data teams and application developers (particularly those working
          in the field of generative AI).
        </p>
        <div class="panel panel-default">
          <div class="panel-body">
            <p class="info-users-text">
              Compute jobs at Modal are containerized and virtualized using gVisor. (<a
                href="https://modal.com/docs/guide/security"
                >Security at Modal</a
              >.)
            </p>
          </div>
        </div>
        <!-- end panel -->
        <p class="info-users-text">
          Modal labs tweeted about fully running on gVisor (<a
            href="https://twitter.com/bernhardsson/status/1708929516955930699"
            >source</a
          >).
        </p>
      </div>
      <div class="col-md-4">
        <div>
          <img
            src="/assets/logos/logo_modal.png"
            alt="Modal logo"
            title="Modal logo"
            class="img-responsive img-vert-center"
          />
        </div>
      </div>
    </div>
    <hr />
    <!-- Northflank -->
    <div class="row display-flex no-space">
      <div class="col-md-12">
        <h2>
          <a href="https://northflank.com/" class="feature-link"> Northflank </a>
        </h2>
        <p class="info-text">
          Northflank is a developer platform that simplifies building, deploying, and scaling
          applications, databases, and jobs.
        </p>
        <div class="panel panel-default">
          <div class="panel-body">
            <p class="info-users-text">
              Northflank uses gVisor to run GPU workloads inside sandboxed environments when nested
              virtualization is unavailable on the underlying infrastructure. (<a
                href="https://northflank.com/blog/gpu-sandboxes"
                >GPU sandboxes: isolation models and platform support in 2026</a
              >).
            </p>
          </div>
        </div>
        <!-- end panel -->
      </div>
    </div>
    <hr />
    <!-- OpenAI -->
    <div class="row display-flex no-space">
      <div class="col-md-8">
        <h2>
          <a href="https://openai.com/" class="feature-link">
            OpenAI
          </a>
        </h2>
        <p class="info-text">
          OpenAI develops Artificial Intelligence systems.
        </p>
        <p class="info-users-text">
          OpenAI uses gVisor for
          "<a href="https://openai.com/index/securing-research-infrastructure-for-advanced-ai/">some higher-risk tasks</a>",
          such as
          <a href="https://drive.google.com/file/d/1jjqrV76-86rdEcmFNnxMs4lI-ncAookn/view?resourcekey">code execution</a>.
        </p>
      </div>
      <div class="col-md-4">
        <div>
          <img
            src="/assets/logos/openai_logo.svg"
            alt="OpenAI logo"
            title="OpenAI logo"
            class="img-responsive img-vert-center"
            style="max-height: 120px;" />
        </div>
      </div>
    </div>
    <hr />
    <!-- Tailscale -->
    <div class="row display-flex no-space">
      <div class="col-md-8">
        <h2>
          <a href="https://tailscale.com" class="feature-link">
            Tailscale
          </a>
        </h2>
        <p class="info-users-text"> Tailscale provides a mesh-based VPN service
          designed to simplify secure networking between devices and servers.
        </p>
        <div class="panel panel-default">
          <div class="panel-body">
              <p class="info-users-text"> In userspace mode, Tailscale uses the
                gVisor netstack library, implementing networking in userspace.
                (<a href="https://tailscale.com/kb/1177/kernel-vs-userspace-routers">Kernel vs. netstack subnet routing &amp; exit nodes</a>.)
              </p>
          </div>
        </div> <!-- end panel -->
      </div>
      <div class="col-md-4">
        <div>
          <img
            src="/assets/logos/tailscale_logo.svg"
            alt="Tailscale logo"
            title="Tailscale logo"
            class="img-responsive img-vert-center"
            style="max-height: 120px;" />
        </div>
      </div>
    </div>
  </div>
  <!-- end div with padding -->
</div>
<!-- end container -->