# Agent Substrate — AI Coding Tool Review & Pricing

> Agent Substrate is a security-hardened, zero-trust runtime for running large numbers of sandboxed agents on standard Kubernetes. It maps many stateful actors onto a small pool of warm workers, snapshots idle actors out of memory and restores them on request, and keeps credentials outside the sandbox. Google donated it to the CNCF alongside gVisor in November 2026.

Source: https://ai.dosa.dev/tools/agent-substrate · Updated Nov 8, 2026 · Category: Autonomous & Async Agents · Published by dosa.dev

## At a glance

- **Tool**: Agent Substrate
- **Company**: Google (donated to CNCF)
- **Category**: [Autonomous & Async Agents](https://ai.dosa.dev/category/async-agents)
- **Pricing model**: Open Source
- **Official website**: https://ate.dev/

## Key features

- Every actor runs in a gVisor or microVM sandbox with segregated compute, network and storage
- Short-lived per-actor SPIFFE identity and default-deny networking
- Egress gateway (`atenet-egress`) injects credentials outside the sandbox so agents never hold API keys
- Snapshots RAM and filesystem state of idle actors and resumes them in under 500 ms
- 10x to 30x oversubscription of stateful actors onto warm worker pods
- Harness agnostic: hosts ADK, LangChain, Claude Code, Codex, Antigravity and sandboxed MCP servers
- Base layer for Google AX (Agent Executor) and kagent

## Pricing

**Model**: Open Source

Free and open-source under the Apache License 2.0; you pay for your own Kubernetes cluster, compute, storage and model usage.

## Who it is for

- **Best for**: Platform teams that need to run many untrusted, mostly idle agents or coding sandboxes on Kubernetes with strong isolation, identity and credential controls.
- **Not ideal for**: Individual developers or small teams without Kubernetes experience who just want to run a coding agent locally.

## Verdict

A serious, production-minded isolation layer for agent fleets; heavy to operate, but one of the strongest open options for running untrusted agents at scale.

## Recent updates

v1.0.0 was released on Nov 5, 2026 with a public API and configuration compatibility commitment, and on Nov 6, 2026 Google announced it is donating Agent Substrate and gVisor to the CNCF.

## Frequently asked questions

### Is Agent Substrate free?

Yes - Agent Substrate is Open Source. Free and open-source under the Apache License 2.0; you pay for your own Kubernetes cluster, compute, storage and model usage.

### Is Agent Substrate open source?

Yes - Agent Substrate is open source. Free and open-source under the Apache License 2.0; you pay for your own Kubernetes cluster, compute, storage and model usage.

### Who is Agent Substrate best for?

Platform teams that need to run many untrusted, mostly idle agents or coding sandboxes on Kubernetes with strong isolation, identity and credential controls.

### Who is Agent Substrate not ideal for?

Individual developers or small teams without Kubernetes experience who just want to run a coding agent locally.

### What are the best Agent Substrate alternatives?

The closest Agent Substrate alternatives on ai.dosa.dev are Jules by Google, OpenHands, SWE-agent - all listed under Autonomous & Async Agents.

### Who makes Agent Substrate?

Agent Substrate is developed by Google (donated to CNCF). It is listed in the Autonomous & Async Agents category on ai.dosa.dev.

## Top alternatives

- [Jules by Google](https://ai.dosa.dev/tools/jules) (Freemium) — Developers who want to offload repetitive, non-urgent tasks like dependency version bumps, lint fixes, test scaffolding, and resolving CI failures in GitHub-hosted projects.
- [OpenHands](https://ai.dosa.dev/tools/openhands) (Freemium) — Individual developers and software teams looking to automate repetitive coding tasks, repository maintenance, and issue resolution through autonomous agents.
- [SWE-agent](https://ai.dosa.dev/tools/swe-agent) (Open Source) — Autonomous resolution of software engineering issues in real GitHub repositories and performing custom developer tasks using language models.
- [mini-swe-agent](https://ai.dosa.dev/tools/mini-swe-agent) (Open Source) — Researchers and engineers who want a small, transparent coding agent baseline for benchmarks, fine-tuning or sandboxed batch runs, and developers who want a simple bash-only agent in the terminal.
- [Sweep](https://ai.dosa.dev/tools/sweep) (Freemium) — Individual developers and teams working primarily in JetBrains IDEs who want a native-feeling assistant for routine coding tasks, bug fixes, and autocompletions.
- [Ellipsis](https://ai.dosa.dev/tools/ellipsis) (Freemium) — Teams looking to centralize and govern AI coding agents across repositories with secure, non-personal credentials and persistent cloud-based execution.
- Full alternatives guide: https://ai.dosa.dev/tools/agent-substrate/alternatives