---
title: "E2B for Enterprise"
description: "Enterprise agent infrastructure: one Firecracker microVM per session, per-sandbox egress control, secrets resolved at egress, E2B Cloud or BYOC on AWS and GCP, SOC 2 Type II."
url: "https://e2b.dev/enterprise"
---

# E2B for Enterprise

> Run agents your security team can sign off on. Every agent session runs in its own Firecracker microVM. Control egress per sandbox and keep credentials outside the guest. Run in E2B Cloud or in your own AWS or GCP account.

## In production

- More than one billion sandboxes started.
- More than 10 million SDK downloads a month across npm and PyPI.
- 94 of the Fortune 100 have signed up.
- BYOC in production on AWS and GCP.
- SOC 2 Type II report available from the trust center at https://trust.e2b.dev.
- Customers with published case studies include Genspark, Hugging Face, Manus, Lindy, Groq, Gumloop, and Rogo.

## Security

Each control is documented, and the runtime is Apache-2.0, so a security team can read what it is approving.

- Isolation: a Firecracker microVM with its own guest kernel per session, on KVM. A kernel exploit inside the sandbox still needs a Firecracker escape to reach the host. Each microVM has its own memory and supports pause, snapshot, and fork.
- Network: egress allow and deny per sandbox by IP, CIDR, or domain. Outbound traffic can be routed through a SOCKS5 proxy the customer runs (private beta); egress fails closed if the proxy is unreachable. Public sandbox URLs can require a per-sandbox access token.
- Secrets: values resolve at egress. No API response, log, or sandbox holds them.
- Observability: OpenTelemetry metrics and logs to a customer OTLP endpoint on the Enterprise plan. Every lifecycle event is delivered as a signed webhook.
- Compliance: SOC 2 Type II. The SOC 2 report, bridge letter, penetration test report, and DPA template are in the trust center. HIPAA BAA and the subprocessor list are available on request.
- Security contact: security@e2b.dev.

## Deployment options

The same SDK, CLI, and API work across every option, so changing deployment does not require rewriting the integration.

### E2B Cloud (available)

- E2B control plane and data plane, operated by E2B on Google Cloud in US, EU, and APAC regions. One microVM per session.
- Keys and storage managed by E2B on Google Cloud.
- Provisioning: sign up.
- Best for most teams.

### BYOC on AWS and GCP (available)

- E2B control plane; data plane in the customer's VPC. Sandbox traffic goes from the client to the VPC, never through E2B Cloud. Aggregate CPU and memory metrics and control-plane API traffic reach E2B.
- Customer IAM role, VPC, storage, and cloud audit log.
- Provisioned with Terraform and machine images. E2B provisions, monitors, and operates the cluster.
- Best for regulated data and for teams selling into enterprises.
- Azure BYOC is in progress.

### Private cloud (in development)

- Control plane and data plane inside the customer boundary. Nothing leaves. Terraform, inside the customer network.
- Best for air-gapped, sovereign, and on-prem networks. Design partners welcome.

### E2B Embed (on the roadmap)

- One node in the customer's own AWS account, open source, installed with one Terraform module. Nothing leaves.
- Best for teams that start self-hosted. The open-source infra repo self-hosts with Terraform today; Embed is its single-node package.

## Controls

| Control | Detail | E2B Cloud | BYOC |
| --- | --- | --- | --- |
| Egress | Allow and deny per sandbox by IP, CIDR, or domain. Customer SOCKS5 proxy in private beta, fails closed. | Yes | Yes |
| Secrets | Values resolve at egress; no API response or sandbox holds them. Short-lived OIDC identity tokens in private beta. | Yes | Yes |
| Encryption | TLS in transit. At rest under Google Cloud's default encryption on E2B Cloud; under the customer's own controls on BYOC. | Yes | Yes |
| Network placement | Internal load balancer and VPC peering keep sandbox traffic in the customer's private network. | N/A | Yes |
| Observability | OpenTelemetry metrics and logs to a customer OTLP endpoint on Enterprise, best-effort delivery. Signed lifecycle webhooks. | Yes | Yes |
| Regions | US, EU, and APAC on E2B Cloud. Customer region on BYOC. | Yes | Yes |
| Provisioning | Terraform and machine images. E2B provisions and monitors the cluster. | N/A | Yes |
| SLA and support | Uptime and support terms are set in the Enterprise agreement. Discord and support@e2b.dev on every plan. | Yes | Yes |
| Compliance | SOC 2 Type II report, penetration test report, and DPA in the trust center. HIPAA BAA and questionnaire on request. | Yes | Yes |

SSO, SCIM, and RBAC are planned; ask E2B about timelines. Security FAQ: https://docs.e2b.dev/faq/security-and-compliance.

## Customers

- Gumloop: "E2B gives us a fast, secure way to run AI-generated code at scale, so we can ship workflow automation our enterprise customers trust." Rahul Behal, Co-founder.
- Rogo runs 10,000 to 15,000 concurrent sandboxes for agents serving financial institutions, with Claude Managed Agents and E2B.
- Genspark runs a general-purpose agent for millions of users, each task in its own machine.
- Manus gives each agent 27 tools on a full machine, in production.

## How teams buy

- Usage-based: start on Hobby or Pro. Billed per second for CPU and RAM while a sandbox runs. Paused sandboxes are not billed.
- Committed use: a one-year minimum usage commit for higher concurrency at lower rates, custom session length and resources, and an Enterprise agreement with SLA and support terms.
- BYOC: Enterprise plan. E2B provisions and operates the cluster in the customer's AWS or GCP account.

## Next steps

- [Book a call with an engineer](https://e2b.dev/contact.md). The first call covers an architecture review for your boundary, your security questionnaire, and pricing for your concurrency and regions.
- Email [security@e2b.dev](mailto:security@e2b.dev) for security questions and questionnaires.
- [Review the security and compliance FAQ](https://docs.e2b.dev/faq/security-and-compliance).
- [Visit the trust center](https://trust.e2b.dev/).
- [Read the BYOC documentation](https://docs.e2b.dev/byoc).
- [See pricing](https://e2b.dev/pricing.md).
- [Review customer case studies](https://e2b.dev/customers.md).