Run anything a shell can.
Execute commands through the CLI or HTTP API, with output and exit codes ready for your automation.
EXECUTIONLet code run. Let state stay.
Keep the infrastructure yours.
Stateful Linux microVMs for coding agents, experiments and development. Commands, terminals, files and snapshots, on the hardware you control.
Bring your own machine ↗# A fresh machine. A familiar shell. ❯ ahvm create agent-01 --cpus 2 --memory 4096 sandbox ready ❯ ahvm exec agent-01 -- sh -c 'echo hello' hello ❯ ahvm snapshot create agent-01 before-experiment checkpoint saved ❯
Persistent disks, reattachable sessions and snapshots you can restore.
Run the stack on your Linux server. Choose the agent and the workload.
A small set of primitives for the whole workflow, from the first command to the checkpoint you come back to.
Execute commands through the CLI or HTTP API, with output and exit codes ready for your automation.
EXECUTIONPersistent terminal sessions with live input, resize and detach. Your session can outlive the client.
TERMINALSStream large uploads without a fixed file-size cap. Atomic replacement keeps interrupted transfers from overwriting the original.
FILESYSTEMSave disk and memory state. Restore a checkpoint as a new sandbox, or stop and start from saved state.
SNAPSHOTSAuthenticated HTTP previews and WebSocket forwarding for your guest applications. Private TCP access is explicit.
NETWORKINGIdle-stop frees compute. Start explicitly when you need it again. Resource quotas keep the host under your control.
LIFECYCLEOne stack. A real guest kernel. A terminal you already know how to use.
Use your Mac or Linux terminal. Your sandboxes run on your own Linux server.
curl -fsSL https://ahvm.app/install.sh | bashProvision AHVM over SSH. Ubuntu downloads directly to the server.
ahvm host add home --ssh root@YOUR_IP --installUse the default Ubuntu image, run your agent, and keep its files and sessions.
ahvm create dev --cpus 2 --memory 4096A sandbox should be a place to work, not another platform you have to work around.
AHVM gives you the execution layer. Bring your own tools and agent, keep the data on your host, and build the workflow that fits.
Install the small client on your Mac or Linux machine. Connect your server over SSH; it downloads Ubuntu directly and keeps your sandboxes there.
curl -fsSL https://ahvm.app/install.sh | bashCommunity self-hosting is free for individuals and companies with up to $1 million in total group ARR. For teams who want help running their agent workspaces, we’re opening three paid pilot places.
€0 / software
For individuals and companies with total worldwide ARR of $1 million or less, including affiliates.
Your infrastructure and model usage are separate costs. Above $1 million ARR, a paid commercial software license is required. Read the license terms ↗
From €299 / month
A dedicated host for your team’s coding-agent workspaces, with hands-on help getting started.
Management fee. Infrastructure, model usage and applicable taxes are additional. Scope, capacity, onboarding costs and pilot duration are agreed before you start. This fee does not include an above-threshold commercial software license.
Have your own infrastructure or a different setup in mind? sales@ahvm.app ↗
AHVM is available to self-host. We’re also opening three paid team pilots for dedicated hosting with hands-on setup and support. Contact us to agree the scope; there is no instant shared-cloud signup.
Yes. New sandboxes include Ubuntu, Node.js LTS, Bun, Python, Git, Claude Code, Codex, OpenCode and Pi. Sign in with your own provider account or API key.
A normal stop saves a local disk and memory snapshot for the next start. Idle-stop is automatic; starting again is explicit. Worker recovery uses the latest saved checkpoint, not unsaved RAM. Local snapshots are not off-host backups.
The current runtime uses libkrucible, our libkrun fork. The qualified server bundle is Linux x86_64/KVM. Standalone clients are available for Apple Silicon, Intel Macs and Linux x86_64. A macOS server package and a Firecracker backend are not included.
This is our initial release for evaluation on your own hardware. We’re improving the development experience before the first stable release. It is not a production security sign-off for hostile multi-tenant workloads.