Building secure, scalable agent sandbox infrastructure

browser-use.com
February 27, 2026
6 min read
47/100
Summary
Browser Use operates millions of web agents using AWS Lambda for isolated execution and instant scaling. The infrastructure supports code execution in a secure sandbox environment, allowing agents to run Python, execute shell commands, and create files.
Key Takeaways
- Browser Use transitioned from using AWS Lambda for web agents to a more secure infrastructure utilizing Unikraft micro-VMs for agent execution.
- The new architecture isolates agents in a sandbox environment, preventing access to sensitive information and allowing for independent scaling and management.
- The control plane acts as a proxy, ensuring that sandboxes have no direct access to external resources, thus enhancing security.
- The system employs techniques such as bytecode-only execution, privilege dropping, and environment stripping to harden the sandbox against potential vulnerabilities.
Coverage & discussions
Hacker News · browser-use.com
Community discussions
Historical count: 5 · 5 saved in sample · Historical sample
Analysis ready
Community Sentiment
Positives
- The adoption of Unikernels in more projects indicates a growing interest in efficient and secure AI infrastructure, which could enhance performance and scalability.
- Improvements in Unikraft's Cloud offering suggest that developer experience is being prioritized, making it more viable for production use.
Concerns
- Prompt injection vulnerabilities in LLMs pose significant risks, undermining the effectiveness of sandboxing and requiring constant supervision, which is impractical.
- The proposed hardening measures for security appear insufficient, relying on obscurity rather than robust solutions, which raises concerns about their effectiveness.
Related Articles

Self-hosted dev sandboxes with preview URLs (Docker, Go, no K8s)
Jun 3, 2026

The agent harness belongs outside the sandbox
May 2, 2026

Let's discuss sandbox isolation
Feb 27, 2026

Sandboxes won't save you from OpenClaw
Feb 25, 2026

Docker Sandboxes – Disposable, isolated sandboxes for AI agents
Aug 10, 2026