Runtime (YC P26) – Sandboxed coding agents for everyone on a team

Hey HN, We're Gus and Carlos from Runtime (https://runtm.com). We're building infra that lets your whole team (including non-engineers) ship with Claude Code, Codex, and other agents without engineering having to handhold every session.After Mentum (YC S21) was acquired, I personally shipped 4 full-stack products in 3 months using coding agents. When I tried to roll the same workflow out to the rest of the team, it fell apart: Most PRs were unmergeable slop - Every repo required an engineer doing one-off local setup. - Skills and context lived in one person's head. - There was no safe way for a PM to touch a real codebase without risking a bad deploy or a secrets leak.Carlos comes from building agentic reconciliation systems at Modern Treasury and had a similar experience when letting his support team use devin.We ended up building internal background agent infra but it quickly became a nightmare to mantain and develop. We built Runtime so you don't have to do this kind of thing.Runtime work like as follows. Engineering defines the context once: system instructions, skills, and scoped integrations installable via CLI, mise, npm, or any package manager. Then Runtime snapshots your full running environment including multi-service Docker Compose setups, Kafka, Redis, seeded DBs, so it comes up in milliseconds with every server already running.We orchestrate across sandbox providers like E2B, Daytona, EC2 or self-hosted K8s depending on your setup. Secrets are injected through our managed proxy so they never touch the agent directly, and guardrails run at the infrastructure level: command allow/deny lists, network egress controls, and RBAC scoped per human and per agent. Every session also gets a shareable preview URL, so internal builds go from sandbox to the rest of the team without needing production access.Runtime works with whichever agent your team already uses: Claude Code, Codex, Cursor, Copilot, Gemini, Devin. You can trigger

Hacker NewsToolAISource
0Sign in to voteCopy link

FL score

78

out of 100

Verdict

BUILD

high confidence

Competition

No competitor data yet

Trend

No signal yet

Infrastructure layer that democratizes AI coding agents by solving the operational complexity of safely deploying them across non-technical teams.

The pain

Engineering teams can use coding agents productively, but scaling this to PMs, support staff, and other non-engineers creates: unmergeable code, security risks (secrets exposure), deployment dangers, context silos, and requires constant engineer babysitting. Companies either block agent access or burn engineering cycles on oversight.

The gap

No platform exists that combines: (1) reproducible sandboxed environments with full service stacks, (2) agent-agnostic orchestration, (3) infrastructure-level security guardrails, and (4) seamless team collaboration workflows. Teams either build this internally (expensive, fragile) or don't use agents at scale.

Build angle

Start with the highest-friction use case: support/operations teams using agents for code changes. Build the sandbox + security layer first, then expand to PM/product workflows. Charge per sandbox-hour or per team member. Position as 'agent infrastructure' not 'agent IDE', this is DevOps for AI.

Strengths

  • Founders have direct experience shipping with agents AND scaling to teams (credibility)
  • Solves a real, acute pain point that will only grow as agent adoption accelerates
  • Agent-agnostic approach future-proofs against model/tool churn
  • Infrastructure-level security is defensible and hard to replicate
  • Clear monetization path (usage-based pricing on compute + premium features)
  • YC pedigree + relevant prior exits (Mentum acquisition) + domain expertise (Modern Treasury)
  • Timing is perfect, Claude Code, Cursor, Devin all launching now; enterprises need this
  • Shareable preview URLs solve a real collaboration gap

Risks

  • Sandbox provider dependency, if E2B/Daytona have outages, Runtime fails; need multi-provider resilience
  • Competitive threat from: (1) sandbox providers adding agent features natively, (2) agent platforms (Devin, Cursor) building team features, (3) cloud providers (AWS, GCP) bundling this
  • Adoption friction, requires engineering to define context/skills upfront; lazy teams won't do this
  • Security is table-stakes; one breach destroys credibility; needs SOC 2, regular audits, bug bounty
  • Market timing risk: if agent code quality doesn't improve, demand for 'safe agent deployment' stays niche
  • Sales complexity, needs to land with both engineering (infrastructure buy-in) and non-engineers (end users); dual champion problem
  • Unclear if this is a $100M business or a $20M acquihire target for a larger platform

Questions about this idea?

FlyBot reads the scoring and gives you a second opinion on “Runtime (YC P26) – Sandboxed coding agents for everyone on a team”.

Open FlyBot