# Agent sandbox foundations for buyers

Learn why AI agents need sandboxes, how the main isolation types differ and how to read a sandbox provider listing, so you can ask the right questions.

- Level: Foundations
- Length: 40 minutes
- Exam questions: 10, pass mark 80%, up to 3 attempts
- Certificate: valid for 12 months

## What you will learn

- Explain why an agent that runs code or reads untrusted content needs a sandbox.
- Name the OWASP LLM risks that a sandbox helps limit, and say why it does not stop prompt injection.
- Compare process rules, containers, gVisor, microVMs, full VMs and WebAssembly by what the code shares with the host.
- Read a sandbox provider listing and tell a published fact from an empty field.

## Lessons

1. [Why AI agents need a sandbox](https://agentsandboxes.fyi/academy/agent-sandbox-foundations/why-agents-need-a-sandbox.md) (12 minutes)
2. [Isolation types and what they share](https://agentsandboxes.fyi/academy/agent-sandbox-foundations/isolation-types.md) (14 minutes)
3. [How to read a sandbox provider listing](https://agentsandboxes.fyi/academy/agent-sandbox-foundations/read-a-sandbox-listing.md) (14 minutes)

## Questions

### Is this course about building a sandbox?

No. It is for people who choose, buy or approve a sandbox provider. It teaches what you need to read a listing and question a vendor, not how to build a runtime.

### Does the course rank providers?

No. This site never calls a provider best. The course shows you how to compare providers against your own needs, with each vendor's own documentation.

### Does the certificate show I can approve a sandbox for my company?

No. It is a certificate of completion from this site and records that you passed the exam. It is not a licence or a security audit, and it does not vouch for your skills.

Also on the [web page](https://agentsandboxes.fyi/academy/agent-sandbox-foundations).