Sandstorm

Overview

Sandstorm is an open-source self-hosted web app platform created by Kenton Varda and backed by Y Combinator in 2014, based in the United States. It packages every app into an isolated grain sandbox and applies a capability security model for fine-grained authorization, letting users run multiple web apps on their own server without interference, as a self-hosted application layer within the cloud server ecosystem.

Note that the project has ended commercial operations: the official Oasis hosting service closed in 2020 and the code is maintained by the community, with the latest release being v0.308. Evaluate the maintenance status carefully before adopting it and be cautious about production use; start with the Open Source Software Market Analysis and the Server Selection Guide.

Key Strengths

• Grain sandbox isolation: Every app runs in an isolated sandbox container, so a compromised app cannot affect others.
• Capability security model: Fine-grained permission control grants each app only the minimum file and network access it needs.
• Dramatically reduced vulnerability risk: The sandbox model is claimed to eliminate about 95% of common security vulnerabilities, valuable when many apps share one server.
• 1-click app installation: The App Market installs multiple self-hosted web apps with 1 click, lowering the deployment barrier.
• Data sovereignty first: All data stays on the self-hosted server and is fully controlled by the user, suiting teams that value sovereignty and privacy.

Product Ecosystem

Sandstorm Platform

Sandstorm is the core open-source self-hosted platform; users run it on their own server and manage apps, users and permissions through a web interface.

App Market

The built-in App Market hosts documentation, notes, communication and project management apps, supporting 1-click install and updates as the main entry point to the sandbox ecosystem.

Oasis Hosting (Closed)

Oasis was the official hosted offering and closed in 2020; only self-hosting deployment remains available.

Limitations

• Commercial maintenance ended: The official Oasis hosting closed in 2020 with only community maintenance since, so security updates and compatibility risks must be assessed.
• Limited app ecosystem: Far fewer installable apps than mainstream SaaS and conventional hosting panels.
• Not for traditional hosting: It is a self-hosted app platform, not virtual/shared hosting, so usage differs clearly from mainstream control panels.
• Small community: Limited documentation and support, with issues mostly resolved through community discussion.

Use Cases

• Self-hosting for individuals and small teams (★★★★): Safely run multiple web apps on one server while lowering ops and isolation costs.
• Learning sandboxes and security models (★★★): A learning and experimentation environment for teams interested in container isolation and capability security.
• Production environments (★): Commercial maintenance has ended, so new projects should not depend on it; see Containerized Deployment Guide for alternatives.

Pricing

Note: Sandstorm is distributed as open source, so costs mainly come from the server resources for self-hosting.

FAQ

• Is Sandstorm still maintained? Commercial operations have ended: the official Oasis hosting closed in 2020 and the code is community-maintained, with the latest release at v0.308, so assess risks before production use. See open source software market analysis.

• How is Sandstorm different from control panels like cPanel or aaPanel? Sandstorm is a self-hosted web app platform that isolates apps in sandboxes, while control panels focus on server and website management; see aaPanel Server Management for panel-style solutions.

• Is it suitable for production? Because commercial maintenance has ended, new projects should not depend on Sandstorm in production; see Containerized Deployment Guide for alternatives.

• How do I install apps? Use the built-in App Market to install documentation, notes, communication and project management apps with 1 click. See Docker deployment basics.

• What do I need to self-host? An accessible cloud server and a domain; see the Server Selection Guide for server options.