sandboxes

A sandbox is a shallow enclosure filled with sand that is used as a play space for children. The term sandbox is also used in computing to describe a controlled, isolated environment in which software can be tested or executed safely.

In computing, sandboxes impose restrictions on what code can do, such as access to the file system, network, or hardware resources. By confining execution to a restricted environment and monitoring resource usage, sandboxes help prevent untrusted or experimental code from damaging the host system or data.

Common types include operating system sandboxes (for example, Windows Sandbox; Linux with sandboxing frameworks like SELinux or AppArmor), language-based sandboxes (such as the Java sandbox), and browser sandboxes that isolate processes and tabs. Virtual machines and containers are related concepts that provide stronger isolation but are not always classified as sandboxes; they trade isolation for practicality and performance.

Usage scenarios include software development and testing, malware analysis, secure web browsing, and API or plugin testing in an iterative environment. Sandboxes are not fail-safe; misconfigurations or flaws in the sandbox can allow escapes, and there can be performance or compatibility overhead. They are typically used in combination with other security measures.

In other fields, sandboxing also refers to regulated testing environments, such as regulatory sandboxes for fintech or digital services, which allow companies to trial innovations under supervisory oversight.