Devvm

Devvm is an open source command-line tool that provides an isolated virtual machine sandbox for every software project and coding agent.

Devvm creates an isolated virtual machine sandbox for any project using a single command. It sets up the project toolchain automatically and runs human developers or coding agents like Claude Code, Codex, and opencode safely inside the environment. The sandbox mounts the project folder, forwards ports automatically, and restricts network access to protect the host machine from supply chain attacks, leaked secrets, and rogue agents. It runs on macOS and Linux using Lima, and supports custom layers, toolchains, and devcontainer.json files. Developers can manage VMs, build custom images, handle secrets, and open environments directly in VS Code over Remote-SSH.

Devvm at a glance

Best for: Software engineer
Runs on: macOS, Linux, CLI, VS Code
Pricing: Free and open source under the MIT license
Released: November 2026
Category: AI coding tool
Website: devvm.dev

Key features

Provides an isolated virtual machine sandbox for every project
Supports coding agents such as Claude Code, Codex, and opencode
Forwards ports automatically between the VM and host machine
Protects local git configuration and hooks from modification
Restricts network access with configurable security tiers
Shares toolchains and caches base images efficiently
Integrates with VS Code via Remote-SSH
Supports custom layers and devcontainer.json configuration

Use it for

Running coding agents securely inside an isolated sandbox
Testing code and toolchains without modifying the host system
Managing project-specific virtual machines from the command line
Developing applications using devcontainer.json configurations

Alternatives to Devvm

Devbox — Runs securely on your infrastructure with isolated sandboxes and credential proxies.
devpit — Control multiple coding agents in one window with side-by-side panes and cost tracking.
jevgrep — Reduces coding agent costs by providing targeted, relevant repository context.
VTCode — It runs locally or hosted with sandboxed tools and resumable sessions.
Shim — It offers zero runtime dependencies, no telemetry, and a static binary.
Vne — Blocks agent access to secrets while letting it manage env files safely.
OpenSandbox — Provides isolated environments with multi-language SDKs and lifecycle management.
OpenCode — Works with 75+ model providers, local models, and existing subscriptions
Devbroom — Sorts leftover agent files by evidence and moves them safely to the trash.
Agent Sandbox — Provides a secure and isolated execution layer for autonomous AI agents.
shim-cli — Masks sensitive data and tracks costs for coding agents locally.
DevSpecs — Keeps a durable thread of AI work locally without cloud sync or LLM calls.

All Devvm alternatives