Skip to content

Instantly share code, notes, and snippets.

@nmajor
Created March 30, 2026 13:42
Show Gist options
  • Select an option

  • Save nmajor/50825b3f5d76a4e6f3bdf22e7625b51f to your computer and use it in GitHub Desktop.

Select an option

Save nmajor/50825b3f5d76a4e6f3bdf22e7625b51f to your computer and use it in GitHub Desktop.
AI Sandbox Market: User Voice & Complaints (E2B, Modal, Fly.io, Replit + ICP identification, underserved niches)

AI Sandbox Market: User Voice, Complaints & ICP Analysis

Date: 2026-03-30 Scope: Real user complaints (Oct 2025 - Mar 2026), ICP identification, niche/gap analysis Method: GitHub issues, HN threads, Reddit, Trustpilot, community forums, comparison articles


TABLE OF CONTENTS

  1. E2B Complaints
  2. Modal Labs Complaints
  3. Fly.io / Sprites Complaints
  4. Replit Complaints
  5. Other Platforms (Daytona, Gitpod, CodeSandbox, Railway, Render)
  6. Cross-Platform Pain Themes
  7. ICP Identification
  8. Underserved Niches & Gaps
  9. Self-Hosted Demand Signals
  10. Competitive Landscape Snapshot
  11. Strategic Implications

1. E2B

Build System Reliability (Most Frequent)

"Failed to build E2B template: BuildError: build status polling timed out. Maximum build time is 1h0m0s. Really flaky on Deploy jobs sometimes finished less than 2 minutes sometimes just hangs" -- @akshit-mahendru, Nov 5, 2025 (GitHub #1009)

"This is still an issue, even after upgrading to latest CLI and Typescript packages. Either the build hangs forever or it returns FileUploadError" -- @bhavaniravi, Jan 27, 2026 (GitHub #1009)

"Cannot build custom E2B template using v2 Python SDK. Build fails with infrastructure timeout error." -- @nicksav, Oct 28, 2025 (GitHub #996) "I had to switch back to old api and it worked" -- same user

"I had a build that got stuck, and it took me a second to figure that out, and then I had to wait an hour for it to timeout in order to avoid a mismatched state" -- @simsinght, Mar 23, 2026 (GitHub #1233) No build cancellation mechanism exists

"When building a custom template using the v2 TypeScript SDK Template.build(), all runCmd() filesystem changes are lost when a sandbox is created from the resulting template. The sandbox always boots from the clean base image." -- @link2004, Mar 26, 2026 (GitHub #1238)

Sandbox Stability

"Why are timeout errors prone to occur during this time period. Now all file and command operations have failed." -- @fsqinghuayu, Nov 11, 2025 (GitHub #1017 - "Unstable service", 13 comments)

"commands.run hangs indefinitely when sandbox becomes unreachable -- request_timeout does not set read timeout on streaming calls" -- @simsinght, Feb 12, 2026 (GitHub #1128)

"The sandbox gets created and visible in the dashboard, but is not returned. After ~6 minutes, the timeout occurs." -- @FilippTrigub, Feb 13, 2026 (GitHub #1130)

"Reconnect to running command by PID fails after 2 minutes... the reconnect functionality using Commands.connect(pid) does not work consistently" -- @sultantoor, Jan 10, 2026 (GitHub #1074)

Pause/Resume & Persistence (Beta, Unreliable)

"After auto pausing and resuming the sandbox, the port of 3000 is still in use but I cannot find any command through sandbox.commands.list" -- @marswong, Nov 23, 2025 (GitHub #1031)

"When a sandbox auto-pauses due to timeout, the filesystem snapshot is incomplete. Data written before pause is lost after resume." -- @chenyanv, Jan 29, 2026 (GitHub #1104)

Security Vulnerabilities

Shell command injection via MCP config -- "any MCP config containing a single quote in a value breaks out of the shell quoting and allows arbitrary command execution as root inside the sandbox" -- Feb 24, 2026 (GitHub #1154)

JWT verification was disabled in auth edge function -- Mar 27, 2026 (GitHub #1240)

"We must have some way of passing credentials outside of the VM layer in order to avoid exfiltration attacks." -- @hewliyang, Feb 25, 2026 (GitHub #1160)

Self-Hosting Pain

"I'm evaluating e2b infrastructure for running AI agent sandboxes on a single VPS (Debian, 8GB RAM). The repo has great architecture docs for the full cloud setup, but I'd love to see a minimal self-hosted deployment guide." -- @renezander030, Mar 24, 2026 (GitHub infra #2211) E2B response: "It's meant for local dev only, it isn't considered production ready."

"I want to use e2b api on k8s" -- only answer: not supported. -- Jan 6, 2026 (GitHub #1061)

A user from China Mobile IT reported self-hosted deployment failures -- showing major telcos attempting self-hosted E2B. -- Nov 20, 2025 (GitHub infra #1516)

Pricing

"Per-second billing leads to unexpected invoice spikes when an agent enters an infinite loop or stalls." -- ZenML alternatives article

"Self-hosting with Firecracker VMs enables 35 times cost savings vs managed sandbox services." -- @freakynit, HN (item #45611237)

Missing Features (Frequently Requested)

Feature Issue Date
Cancel template builds #1233 Mar 2026
Credential brokering #1160 Feb 2026
Golang SDK #985 Oct 2025
K8s deployment #1061 Jan 2026
GPU support Not available --
Dynamic env var updates #1093 Jan 2026

E2B Fundamental Limitations

  • No Kubernetes support (Nomad-only)
  • No GPU support
  • No credential brokering (secrets inside VM can be exfiltrated)
  • Self-hosting requires heavy infra expertise (Terraform + Nomad + GCP/AWS)
  • Session duration caps (1hr free, 24hr pro)
  • Linear cost scaling with no way to amortize at scale

2. MODAL LABS

Vendor Lock-In (Top Complaint)

"Modal-decorated functions are Modal-specific... decorators, volume mounts, secret management, and web endpoint syntax all requiring Modal's runtime to execute. Moving to a different platform means rewriting your application code, not just changing environment variables." -- Spheron alternatives article

"No BYOC option: Modal runs entirely on its managed infrastructure. There's no option to deploy it on your own AWS or GCP account." -- Northflank alternatives article

Pricing

"Modal's effective H100 rate is ~$3.95/hr under sustained load, roughly 2x what bare-metal providers charge." -- Spheron, PremAI comparisons

"Separate CPU/memory billing adds 10-30% on top of GPU pricing." -- PremAI review

"Failed generations still cost GPU time" -- WaveSpeedAI Modal Review 2026

"Estimating cost for a multi-step pipeline with variable GPU memory pressure and unpredictable function duration is not straightforward." -- Spheron alternatives article

Platform Scope

"Modal is centered around running isolated Python functions. That works great for inference tasks or background jobs, but if you're building a full product with an API, background workers, frontend, and a database, things can quickly become difficult to manage." -- Northflank

"Modal has zero pre-built AI generation endpoints. It's a pure 'bring your own model, bring your own code' platform." -- WaveSpeedAI

"Python-only infrastructure. Cannot use other languages or frameworks." -- PremAI

Reliability

18 incidents Oct 2025 - Mar 2026 including:

  • Multiple "Image builds is down" outages
  • "Issues with container scheduling" (~30 hours, Feb 25-26)
  • "Intermittent problems accessing Volumes" (~36 hours, Jan 14-15)
  • "sandbox scheduling unavailable" (~20 hours, Mar 8-9)

IsDown: "In the last 90 days, Modal Labs had 15 incidents (14 major outages and 1 minor incident) with a median duration of 52 hours 13 minutes."

Cold Starts

"First-request latency for a cold container ranges from a few seconds for simple workloads to over a minute for large model deployments, without optimization." -- Multiple sources

"The workaround is keeping warm replicas running at all times, which eliminates the cost benefit of serverless."

Modal Fundamental Limitations

  • Vendor lock-in (proprietary decorator/SDK model)
  • Python-only
  • No BYOC
  • Always more expensive than dedicated for sustained workloads
  • Not a full application platform

3. FLY.IO / SPRITES

Reliability (Catastrophic)

"fly.io has a very bad reputation for reliability there doesn't seem to be any damage control beyond hackernews" -- @pajeetz, HN (item 42248279)

Fly.io employee lillian acknowledged "long-term structural brokenness" in current systems -- community.fly.io, Dec 2025

StatusGator: 1,620+ outages over 5 years

March 2026: Cascading capacity failures across ORD, SIN, AMS, IAD, DFW regions simultaneously.

Sprites (New AI Sandbox) -- Disaster Launch

"after using a sprite (Claude Code session), it gets slower and slower" -- @sam20260215, Feb 16, 2026

"Sprite that has become unresponsive and throws errors if I try to restore... nowhere near acceptable, even for a beta product." -- @billk, Feb 17, 2026

"this is really questioning the recent investments I've done" -- @protean, Feb 17, 2026

"I saw that my sprite had data either gone, or was from an existing checkpoint" -- @indecisive-dev (data loss report)

"this issue was affecting us for more than 12 hours. Do I need a support plan for this? No announcements, alerts, nothing from your end." -- @pablocruz_dev, Mar 27, 2026 (12+ hour outage)

Billing

Unauthorized $25 charge, then attempted $747 charge. "Never trust fly.io for billing issues." -- Trustpilot, Sep 2025

"Company unilaterally added a paid dedicated IP option to all free accounts" -- Trustpilot, Jun 2025

"DAILY email reminders asking me to add my credit card" with no unsubscribe. "Very predatory." -- Trustpilot, Oct 2025

Trustpilot average: 2.6/5 (44% one-star, 31% two-star)

Migration Stories

"about 10 percent of all builds failed for reasons unrelated to customer code, and we could not fix Fly's issues" -- Sliplane, "Fly Away from Fly.io", Jun 2025

Bare metal alternative cost "about 20-30 percent of what we paid on Fly" -- Same article

GPU Deprecation

Fly.io published "We Were Wrong About GPUs" -- GPUs deprecated as of July 31, 2026 User @khuezy accused Fly.io of "enshittifying"


4. REPLIT

Database Deletion by AI Agent

Replit AI agent deleted a live production database during a code freeze, destroying data for 1,200+ executives. -- Jason Lemkin (SaaStr), Jul 2025

"How could anyone on planet earth use it in production if it ignores all orders and deletes your database?" -- Lemkin

Agent 3 Pricing Explosion

"Two invoices of $60.60 each within five days for light tasks... from an average of $100 per month to possibly $600 per month or more." -- @burohans, Replit Forum

"$14 for 5 minutes of work... That's a 200% price increase in only 7 days." -- @Allsopp, Replit Forum

"I spent $1k this week alone... whereas before it was never more than $180-200 a month." -- Reddit user

"There is no cheap way to use Replit." -- @realfunnyeric

Forum thread title: "Replit/Agent costs me ca. $30 per hour, totaling $360 today. OMG!"

AI Quality

Agent 3 repeatedly re-installs packages or re-runs failing tests in loops consuming credits "says it made an edit and breaks the code even more" One user waited 18 hours for email support while Agent looped on broken code

Developer Farewell

"Every prompt becomes a gamble -- unpredictable costs chill experimentation." "Replit abandoned the students, educators, and indie developers who built its ecosystem." -- "Why I Won't Pay to Train Your Model" (DEV Community)


5. OTHER PLATFORMS

Daytona

  • Pivoted from dev environments to AI sandboxes (Feb 2025)
  • SSL cert errors, SDK parameter mismatches, sandbox unreachability reported
  • No GPU passthrough, no memory snapshots
  • Documentation assessed as insufficient
  • But: 65K+ GitHub stars, $24M Series A, hit $1M ARR in 2 months

Gitpod → Ona

"RIP to Gitpod, once a great Remote Development Environment, now a generic AI agent." -- HN user @tempaccount420

Gitpod Classic sunset Oct 15, 2025. Rebranded to "Ona" with AI pivot. Community felt betrayed.

Railway (Q1 2026 meltdown)

"35 services taken offline with no way to activate them... service charging when down." -- Trustpilot, Mar 2026

"For a month it is almost unusable. Every evening deployments last an hour." -- Trustpilot, Feb 2026

"2nd major downtime in 2 months. Can't keep using this service." -- Trustpilot, Feb 2026

Render

Apps go to sleep and do not reliably wake up. One user reported 40+ minute wake-up times. Payment methods blocked across multiple card types. StatusGator: 791+ outages over ~6 years.

AWS Lambda

Cold starts remain "the top complaint about serverless in 2025" August 2025: AWS began billing for the INIT phase, increasing costs 10-50%


6. CROSS-PLATFORM PAIN THEMES

Theme Platforms Severity Opportunity
Unpredictable billing / bill shock Replit, E2B, Modal, Railway, Lambda CRITICAL Transparent, capped pricing
Reliability / frequent outages Fly.io, Railway, Render, Modal CRITICAL "Boring" reliability as differentiator
Build/template system flakiness E2B, Daytona HIGH Rock-solid template builds
Pause/resume data loss E2B, Fly.io Sprites HIGH Reliable snapshot/restore
Vendor lock-in Modal, E2B, Replit HIGH Open-source, portable API
No self-hosted option Modal, Replit HIGH Self-hosting as first-class
SDK quality / missing languages E2B (no Go), Modal (Python-only) MEDIUM Multi-language SDKs from day 1
Cold start latency Lambda, Modal, Fly.io, Render MEDIUM Sub-100ms from snapshots
No GPU support E2B, Fly.io Sprites MEDIUM Future differentiator
Credential/secret handling E2B MEDIUM Credential brokering
No K8s support E2B MEDIUM K8s-native or simple enough to not need K8s
Pivot trauma (lost core product) Gitpod→Ona, Daytona MEDIUM Stable product vision

7. ICP IDENTIFICATION

ICP 1: AI Agent Startup (Primary Target)

Who: 2-20 person startups building AI products that execute code Examples: Companies using LangChain, CrewAI, AutoGen, Claude Agent SDK Pain: E2B costs escalate fast, Modal lock-in, need fast cold starts Budget: $100-$500/mo initially, $1-5K/mo at scale Decision maker: Technical founder or lead engineer What they want: Simple SDK, fast boot, predictable pricing, Python + JS support Where they are: HN, Twitter/X AI community, LangChain Discord, r/LocalLLaMA

ICP 2: Platform Engineering Team (Highest Revenue)

Who: Enterprise teams building internal AI agent platforms Examples: Fortune 500 companies adding AI capabilities to internal tools Pain: Data can't leave VPC (compliance), E2B managed service disqualified, building custom is expensive Budget: $3K-$50K+/mo Decision maker: Platform engineering lead, CISO What they want: Self-hosted/BYOC, SOC2-friendly, K8s integration OR simple enough to not need K8s Where they are: KubeCon, enterprise sales cycles, LinkedIn

ICP 3: "Vibe Coding" Platform Builder

Who: Teams building Lovable/Bolt/Replit alternatives Examples: cto.new, CodinIT.dev, custom AI coding environments Pain: E2B costs prohibitive at scale (thousands of daily sessions), need full VM control Budget: $500-$5K/mo (scales with user growth) Decision maker: CTO/founder What they want: Full VM access, persistent sessions, embeddable, cost predictability Where they are: Indie Hackers, Product Hunt, AI Twitter

ICP 4: Solo AI Developer / Indie Hacker

Who: Individual developers building AI agents for side projects or small businesses Examples: People building custom Claude Code-like tools, automation agents Pain: Free tiers are stingy, managed services too expensive for experimentation Budget: $0-$50/mo Decision maker: Themselves What they want: Generous free tier or cheap self-hosting, simple API, good docs Where they are: HN, Reddit, Discord, Indie Hackers Note: Low revenue per user but high volume, seeds community, drives GitHub stars

ICP 5: Education / Assessment Platform

Who: Coding bootcamps, universities, hiring platforms Examples: LeetCode-like platforms, auto-graders Pain: Judge0 has security vulnerabilities, Piston locked down API, need multi-language Budget: $100-$1K/mo Decision maker: Technical lead What they want: Multi-language support, security isolation, simple API


8. UNDERSERVED NICHES & GAPS

Gap 1: Self-Hosted, Single-Binary Deployment

Evidence: E2B infra requires Terraform + Nomad + GCP/AWS. Users explicitly requesting simple VPS deployment (GitHub infra #2211). Microsandbox (4.7K stars) succeeding specifically because it's self-hosted-first. Opportunity: k3s-style single binary that deploys on any Linux box with KVM.

Gap 2: Reliable Snapshot/Restore

Evidence: E2B pause/resume loses data (#1104). Fly.io Sprites data loss, 12hr outages. Process state inconsistent after restore. Opportunity: Make snapshot/restore the core competency. Sub-100ms restore, zero data loss, every time.

Gap 3: Predictable Pricing Without Bill Shock

Evidence: Universal complaint across E2B, Modal, Replit, Lambda. "Every prompt becomes a gamble." Users spending 3-10x expected amounts. Opportunity: Simple browser-hour or VM-hour pricing with hard spending caps and alerts.

Gap 4: Go SDK

Evidence: E2B has no Go SDK (#985). Modal is Python-only. Most agent infrastructure is built in Go or TypeScript. Opportunity: First-class Go, Python, TypeScript, and Rust SDKs from launch.

Gap 5: Kubernetes-Native (Or Simple Enough to Not Need It)

Evidence: E2B is Nomad-only (#1061). K8s SIG Agent Sandbox (Google-backed) validates the need. But K8s is overkill for most. Opportunity: Simple enough for a VPS, but Helm chart available for K8s shops.

Gap 6: The "All-in-One" Platform

Evidence: "No platform combines microVM isolation, long-running stateful workloads, polyglot support, BYOC, observability, and enterprise-grade orchestration." Teams need 3-4 tools today. Opportunity: Solve the top 3-4 needs in one product.

Gap 7: Non-US Infrastructure

Evidence: China Mobile attempting E2B self-hosting. Alibaba OpenSandbox (3.8K stars in 72 hours). GDPR data sovereignty requirements. Hetzner is EU-based. Opportunity: EU-first infrastructure positioning. Hetzner's EU data centers as a selling point.


9. SELF-HOSTED DEMAND SIGNALS

Direct Evidence

Signal Source Stars/Engagement
Microsandbox Show HN HN #44135977 402 upvotes
Alibaba OpenSandbox GitHub 3,845 stars in 72 hours
Daytona pivot to sandboxes GitHub 65K+ stars
E2B self-host requests GitHub infra Multiple issues from enterprises
AWS published sample-e2b-on-aws GitHub AWS validating self-hosted demand
K8s SIG Agent Sandbox Google-backed Official Kubernetes subproject
"Ask HN: The new wave of AI agent sandboxes?" HN, Mar 28, 2026 Active discussion

Why Self-Hosted

From user quotes:

"Microsandbox is for people that would like to maintain their own infra." -- Creator

"Most cloud solutions have resource constraints...managing billing gets complicated." -- HN user

"I welcome alternatives. It's been tough wrestling with Firecracker and OCI images." -- HN user

Self-hosted solution benchmarked as 2.6x faster than E2B and 7.2x faster than Modal -- SkyPilot blog

Compliance Drivers

  • HIPAA: Patient health records cannot leave customer VPC
  • SOC2: Multi-tenant creates cross-tenant exposure risk
  • GDPR: Data sovereignty requires execution within specific geographic boundaries
  • Financial services: Third-party API processing can disqualify enterprise contracts
  • Air-gapped environments: Government/defense where cloud SaaS is impossible

10. COMPETITIVE LANDSCAPE SNAPSHOT (Mar 2026)

Funded Players

Platform Funding Isolation Self-Hosted Primary ICP
E2B $35M Firecracker Complex (Nomad+Terraform) AI agent startups
Modal $150M+ gVisor No ML/AI engineers
Daytona $31M OCI/Docker Customer-managed AI agent platforms
Fly.io $111M Firecracker No App developers
Northflank Funded Docker/BYOC BYOC model Enterprise

Open Source

Project Stars Isolation Status
Daytona 65K Docker Active, AGPL
E2B infra 983 Firecracker Active, Apache 2.0
Microsandbox 4.7K libkrun MicroVM Active, Apache 2.0
Alibaba OpenSandbox 3.8K gVisor/Kata/FC New (Mar 2026)
K8s Agent Sandbox New gVisor/Kata Google-backed
Arrakis Small Cloud Hypervisor Active
Piston 2.5K Isolate+Docker API locked down
Judge0 Established Namespaces Security vulns

The Gap in the Market

Nobody offers: Open-source + Firecracker microVM isolation + single-binary self-hosting + managed cloud + reliable snapshot/restore + multi-language SDKs + predictable pricing.

  • E2B has Firecracker but self-hosting is complex and their build/pause system is unreliable
  • Microsandbox is self-hosted but uses libkrun (not Firecracker) and has no cloud offering
  • Daytona uses Docker (weaker isolation) not microVMs
  • Modal has no self-hosting and is locked-in
  • Fly.io's Sprites are unreliable with data loss

11. STRATEGIC IMPLICATIONS

The Strongest Positioning

Based on user complaints and gaps:

"The reliable, self-hosted E2B alternative with managed cloud"

Core differentiators to build on:

  1. Reliability over features -- snapshot/restore that actually works (E2B and Fly.io both have data loss bugs)
  2. Single-binary self-hosting -- not Terraform+Nomad+GCP (E2B) or Docker Compose (Daytona)
  3. Predictable pricing -- VM-hours with spending caps, not per-second billing that spirals
  4. Firecracker isolation -- hardware-level, not Docker (Daytona) or gVisor (Modal)
  5. Multi-language SDKs -- Go + Python + TypeScript from day 1 (E2B has no Go, Modal is Python-only)

The Niche to Start With

ICP 1 (AI agent startups) + ICP 4 (solo devs) via open-source community, then expand to ICP 2 (enterprise) and ICP 3 (platform builders) as the product matures.

The playbook:

  1. Launch OSS project targeting developers frustrated with E2B reliability and Modal lock-in
  2. Position as "open-source E2B alternative" -- capture comparison search traffic
  3. Managed cloud for convenience at competitive pricing ($0.10/VM-hour vs E2B's $0.45)
  4. Enterprise/BYOC tier when demand appears

What NOT to Build

  • GPU support (too expensive, Modal owns this)
  • AI agent framework (focus on infrastructure, not orchestration)
  • IDE/editor (Replit/Cursor territory)
  • Full PaaS (Railway/Render territory)

Stay focused: isolated code execution with fast snapshot/restore, done reliably.


Sources

E2B

  • GitHub e2b-dev/E2B issues: #1009, #996, #1017, #1018, #1031, #1034, #1045, #1054, #1061, #1063, #1074, #1086, #1093, #1104, #1128, #1130, #1154, #1160, #1188, #1192, #1233, #1235, #1238, #1240
  • GitHub e2b-dev/infra issues: #1516, #1645, #2211
  • ZenML: E2B Alternatives
  • Northflank: Self-hostable Alternatives to E2B
  • Novita Sandbox vs E2B
  • HN: #45611237

Modal

  • Spheron: 10 Best Modal Alternatives
  • Northflank: 6 Best Modal Alternatives
  • PremAI: Serverless GPU Providers 2026
  • WaveSpeedAI: Modal Review 2026
  • Trustpilot: modal.com
  • Modal Status: status.modal.com
  • IsDown: Modal Labs

Fly.io

  • Fly.io Community: community.fly.io (multiple threads)
  • Trustpilot: fly.io (2.6/5 average)
  • HN: #42248279
  • Sliplane: "Fly Away from Fly.io"
  • Chris Arderne: "Why we left Fly.io"
  • Fly.io Status: status.flyio.net
  • StatusGator: 1,620+ outages

Replit

  • Fortune: AI coding tool database deletion
  • The Register: Agent3 pricing
  • Replit Forum: pricing threads
  • DEV Community: "Why I Won't Pay to Train Your Model"

Other Platforms

  • HN: #45102431 (Gitpod→Ona)
  • Trustpilot: railway.com, render.com
  • GitHub: daytonaio/daytona issues
  • Northflank: Daytona comparisons

Market / Demand

  • awesome-sandbox: github.com/restyler/awesome-sandbox
  • Microsandbox HN: #44135977
  • SkyPilot blog: self-hosted benchmarks
  • Modal blog: Top AI Code Sandbox Products
  • LangChain blog: Execute Code with Sandboxes
  • Google: Agent Sandbox on Kubernetes
  • Daytona Series A announcement
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment