Free trial
Try a full workspace before you pay.
0 ₫for 5 days
- vCPU1
- Memory2 GB
- Disk5 GB
- Included runtime30 h in total
- Daily cap6 h a day
- Extra runtimenone during trial
- Sleeps when idle15 min
- Max awake at once6 h
[ AGENTBOX ]
Every agent
deserves a
machine of
its own.
Your own cloud workspace, with T3 Code, VS Code, Claude Code, Codex and Oh My Pi ready in any browser.
[ INSIDE EVERY WORKSPACE ]
- T3 Code
- VS Code
- Claude Code
- Codex
- Oh My Pi
- GitHub CLI
[ YOUR MACHINE ]
Your machine,
assembled.
-
01
A read-only system.
Ubuntu 26.04, mounted read-only. Nothing you run can change it.
-
02
Your own Linux user.
One user per workspace, never root, with a private identity on the host.
-
03
A rootless container.
Podman without a daemon or root. Every capability dropped.
-
04
The tools, installed.
T3 Code, VS Code, Claude Code, Codex, Oh My Pi, git, gh, Node 24, Python, uv, ripgrep.
-
05
Your files, kept.
/workspace sits on its own disk quota and survives sleep.
-
06
Its own address.
maple-t3.agentbox.io.vn. Every tool gets a hostname of its own.
[ ANY BROWSER ]
Any browser.
Any device.
No install. No pairing. Open your workspace's address, sign in once, and your editor and your agents are right where you left them. On a laptop, a tablet, or the phone in your pocket.
[ SECURITY ]
Nothing gets in.
Nothing gets out.
LAN 192.168.x
VPN 100.x
Other workspaces
The firewall sits outside the box. Private networks, VPN addresses, cloud metadata and every other workspace are blocked. The open internet is not.
-
$ id -u
1000
a private user, mapped to its own host identity
Never root.
Agents run as an ordinary user. The host never sees root from a workspace.
-
$ grep CapEff /proc/self/status
CapEff
0000000000000000
no capabilities, and no-new-privileges
Every capability dropped.
The kernel privileges a container normally keeps are gone, all of them.
-
$ touch /usr/bin/x
touch: Read-only file system
your files live in /workspace
A system that stays put.
The base system is read-only. A broken install can't break the machine.
-
EGRESSRULE
internetallow
192.168.0.0/16 · 10.0.0.0/8deny
100.64.0.0/10 (VPN)deny
169.254.169.254 (metadata)deny
other workspacesdeny
A firewall with a short allow-list.
Outbound traffic can reach the internet and nothing private.
-
CPU
RAM
PIDs
Hard resource limits.
CPU, memory and process counts are capped per workspace. A runaway job stays in its box.
-
/workspace
Disk quota exceeded
A real disk quota.
The filesystem enforces your limit, so one full disk never becomes someone else's problem.
[ SLEEP & WAKE ]
Asleep when
you are.
- Sleeps when idle.
- Wakes in seconds.
- Your files stay.
Get the highlights.
[ PRICING ]
Pay for what you run.
Try it free for five days, then pick Pro or Max. Prices in dong; your workspace sleeps when you do.
[ RECOMMENDED ]
Pro
A workspace for steady daily work.
139.000 ₫per month · 139 credits
- vCPU2
- Memory4 GB
- Disk20 GB
- Included runtime200 h a month
- That is about6.5 h a day
- Extra runtimebilled in credits
- Sleeps when idle30 min
- Max awake at once12 h
Max
Room for heavier agents.
249.000 ₫per month · 249 credits
- vCPU4
- Memory8 GB
- Disk50 GB
- Included runtime360 h a month
- That is about12 h a day
- Extra runtimebilled in credits
- Sleeps when idle1 h
- Max awake at once24 h
[ EXTRA USAGE WITH CREDITS ]
Past your included hours, usage is metered every minute and drawn from your credit balance. 1 credit = 1.000 ₫. After the trial, a workspace runs on credits alone.
- Runtime
- 600 ₫per hour
- CPU
- 400 ₫per core-hour
- Memory
- 150 ₫per GB-hour
[ FAQ ]
Questions,
answered.
What runs inside my workspace?
A Linux machine (Ubuntu 26.04) with T3 Code, VS Code in the browser, Claude Code, Codex and Oh My Pi, plus git, the GitHub CLI, Node 24, Python, uv and ripgrep. Your files live in /workspace.
Where is it hosted?
On servers run by AgentBox, reached through Cloudflare. Every workspace gets its own hostname under agentbox.io.vn, one per tool, so workspaces never share a browser origin with each other or with the dashboard.
What happens when I stop working?
An idle workspace goes to sleep and stops using runtime. Open its address and it wakes up again. Your files stay on disk the whole time.
How is it kept isolated?
Each workspace is a rootless Podman container under its own Linux user, with a read-only system, every capability dropped, hard CPU, memory, process and disk limits, and a firewall that blocks private networks, VPNs, cloud metadata and other workspaces. The security section shows how.
How does billing work?
Pro and Max include a monthly allowance of runtime. Beyond it, runtime, CPU and memory are metered every minute and drawn from your credit balance (1 credit is 1.000 ₫). The free trial lasts five days with up to six hours of runtime a day; after it, a workspace runs on credits alone and your files are kept. The pricing above is read from the live plans.
How do I get access?
AgentBox is invite-only for now. Request access, and your workspace is created once an administrator approves your account.
What about my data and privacy?
Your files stay in your workspace, readable only by its user, and you can revoke signed-in sessions from your settings. This page sets no cookies and runs no analytics.