Inside Replit’s New Sandbox Engine, Part 1: The Path to MicroVMs

Replit completed a complete rewrite of its sandbox engine, migrating from Docker containers to lightweight microVMs managed by Cloud Hypervisor to improve security, capabilities, and cloud portability. The new engine provides hardware-assisted isolation, minimal guest kernels, and eBPF-based runtime monitoring to securely run autonomous coding agents at scale. Open article →