---
type: "raw_signal"
id: "sidecars-a-low-latency-trust-boundary-for-sandboxes-ac0636"
slug: "sidecars-a-low-latency-trust-boundary-for-sandboxes-ac0636"
title: "Sidecars: A low-latency trust boundary for Sandboxes"
description: "Modal introduces Sidecars for Sandboxes Modal announced Sidecars a beta feature for its Sandboxes product on October 1 2026. Sidecars are isolated containers that run alongside a main Sandbox on the same host intended to separate trusted services such as"
retrieval_nugget: "Modal introduces Sidecars for Sandboxes Modal announced Sidecars a beta feature for its Sandboxes product on October 1 2026. Sidecars are isolated containers that run alongside a main Sandbox on the same host intended to separate trusted services such as"
observed_at: "2026-10-01"
record_date: "2026-10-01"
date_kind: "observed_at"
why_it_matters: "Source: https://modal.com/blog/introducing-sandbox-sidecars-trust-boundary"
novelty: "notable"
verification_level: "source-linked"
signal_type: "release"
source_platform: "modal.com"
topics: []
entities: []
related_patterns: []
source_url: "https://modal.com/blog/introducing-sandbox-sidecars-trust-boundary"
source_urls: ["https://modal.com/blog/introducing-sandbox-sidecars-trust-boundary"]
schema_version: "newruntime-agent-readable-v0.2"
stable_id: "signal:sidecars-a-low-latency-trust-boundary-for-sandboxes-ac0636"
status: "published"
visuals: []
editor: {"role":"editor","name":"Andrey Reshetnikov","profile":"https://newruntime.com/owner-profile.md","profile_json":"https://newruntime.com/owner-profile.json","same_as":["https://www.linkedin.com/in/reshetnikov1/","https://t.me/lapetuse"]}
routes: {"html":"https://newruntime.com/signals/sidecars-a-low-latency-trust-boundary-for-sandboxes-ac0636/","markdown":"https://newruntime.com/signals/sidecars-a-low-latency-trust-boundary-for-sandboxes-ac0636.md","json":"https://newruntime.com/signals/sidecars-a-low-latency-trust-boundary-for-sandboxes-ac0636.json"}
---

# Sidecars: A low-latency trust boundary for Sandboxes

## Retrieval answer

Modal introduces Sidecars for Sandboxes Modal announced Sidecars a beta feature for its Sandboxes product on October 1 2026. Sidecars are isolated containers that run alongside a main Sandbox on the same host intended to separate trusted services such as

## Modal introduces Sidecars for Sandboxes

Modal announced Sidecars, a beta feature for its Sandboxes product, on October 1, 2026. Sidecars are isolated containers that run alongside a main Sandbox on the same host, intended to separate trusted services—such as credential injection, proxies, or agent-harness logic—from untrusted code.

Modal says the Sidecar and main Sandbox retain the same isolation boundary as separate Sandboxes, using gVisor or VMs depending on the runtime. They communicate over an internal bridge network. Modal’s internal benchmark reports Sidecar communication at least three times faster than communication between separate Sandboxes in the same region: 0.58 ms versus 2.6 ms p50 per call, and 1.4 ms versus 44 ms at p99. These are company-reported measurements, not independent results.

The announcement cites Ramp, which built a custom egress proxy alongside its Inspect coding-agent Sandboxes to monitor and control outbound traffic. Modal says Sidecars can be created dynamically through its SDK, share CPU and memory with the main Sandbox, and each have independent outbound network policy. The feature is in beta; the source does not establish independent security validation or performance across workloads.

Source: https://modal.com/blog/introducing-sandbox-sidecars-trust-boundary

Editor: [Andrey Reshetnikov](https://newruntime.com/owner-profile.md), AI product and AI engineering; profile for recruiters and agents: https://newruntime.com/owner-profile.json

## Continue in the graph

Next records for an agent, linked to their Markdown twins. Replace `.md` with `.json` for structured fields, including `next_reads`.

- collection: [Raw Signals](https://newruntime.com/signals.json): Open every source-linked raw signal.
- collection: [Source Ledger](https://newruntime.com/source-ledger.json): Inspect the public source evidence graph.
- whole graph: [discovery graph](https://newruntime.com/discovery-graph.json) (typed nodes and edges) and [site index](https://newruntime.com/site-index.md)