This product was not featured by Product Hunt yet. It will not be visible on their landing page and won't be ranked (cannot win product of the day regardless of upvotes).
Product upvotes vs the next 3
Waiting for data. Loading
Product comments vs the next 3
Waiting for data. Loading
Product upvote speed vs the next 3
Waiting for data. Loading
Product upvotes and comments
Waiting for data. Loading
Product vs the next 3
Loading
Kotak Pasir
Self-hosted AI agent sandboxes for a $5 VPS
Self-hosted disposable sandboxes for AI agents. Hardened Docker containers (cap-drop, read-only rootfs, network=none, egress allowlist) wrapped in a control plane with HTTP API, MCP server, CLI, and Go SDK. Runs on a $5 VPS. MIT licensed.
The problem I kept running into: every "production-grade" agent platform either charges per-tenant fees that don't make sense for indie projects, or requires microVM stacks (Firecracker, Kata) that need KVM — which a $5 VPS just doesn't give you.
So I asked: how far can hardened Docker actually take you?
Turns out, pretty far. Kotakpasir gives each sandbox:
- cap-drop ALL, no-new-privs, read-only rootfs
- network=none by default, opt-in egress via a per-sandbox HTTPS CONNECT proxy on an internal-only network (cloud metadata IPs always blocked)
- Warm pool that turns ~150ms cold-starts into ~1ms claims
- YAML policy file with image allowlist, profiles, and strict mode
Around that, a control plane with four surfaces because agents come from everywhere now: HTTP API, MCP server (works with Claude Desktop, Cursor), CLI, and a Go SDK.
Honest about what it is: containers aren't a security boundary for fully untrusted code. If you need that, wait for the gVisor/Firecracker backends on the roadmap, or use a hosted option. But for the huge middle ground — your own agents, your own code, running where you control the host — this is enough.
It's MIT, pre-1.0, and built in the open. Would love feedback on the security model, the API design, or what runtime backend should ship next.
GitHub: https://github.com/njiplak/kotak...
About Kotak Pasir on Product Hunt
“Self-hosted AI agent sandboxes for a $5 VPS”
Kotak Pasir was submitted on Product Hunt and earned 0 upvotes and 1 comments, placing #76 on the daily leaderboard. Self-hosted disposable sandboxes for AI agents. Hardened Docker containers (cap-drop, read-only rootfs, network=none, egress allowlist) wrapped in a control plane with HTTP API, MCP server, CLI, and Go SDK. Runs on a $5 VPS. MIT licensed.
On the analytics side, Kotak Pasir competes within Software Engineering, Artificial Intelligence, GitHub and SDK — topics that collectively have 551.7k followers on Product Hunt. The dashboard above tracks how Kotak Pasir performed against the three products that launched closest to it on the same day.
Who hunted Kotak Pasir?
Kotak Pasir was hunted by muhammad ilzam mulkhaq. A “hunter” on Product Hunt is the community member who submits a product to the platform — uploading the images, the link, and tagging the makers behind it. Hunters typically write the first comment explaining why a product is worth attention, and their followers are notified the moment they post. Around 79% of featured launches on Product Hunt are self-hunted by their makers, but a well-known hunter still acts as a signal of quality to the rest of the community. See the full all-time top hunters leaderboard to discover who is shaping the Product Hunt ecosystem.
For a complete overview of Kotak Pasir including community comment highlights and product details, visit the product overview.
muhammad ilzam mulkhaq