BLAST
Open-source VMs-as-a-service: a single binary for local sandbox orchestration that provides a simple API to fork, run, and manage sandboxed VMs.
At a Glance
Fully free and open-source under the MIT License. Self-hosted via a single binary installed with Cargo.
Engagement
Available On
Alternatives
Listed Sep 2026
About BLAST
BLAST is an open-source, MIT-licensed project from the stanford-mast organization that delivers VMs-as-a-service through a single self-contained binary. Written in Rust, it provides local sandbox orchestration over a pool of CPU, memory, and disk resources, exposing a straightforward REST API for forking and running sandboxed commands. The project has accumulated nearly 800 GitHub stars since its April 2025 creation and is actively maintained by a growing team of open-source sandboxing and orchestration contributors.
What It Is
BLAST is a local sandbox orchestrator that abstracts over multiple sandbox backends — including SmolVM, Hypeman, and Docker — to give developers a unified control plane for VM lifecycle management. Rather than requiring complex infrastructure tooling, it ships as a single 7 MB binary installable via Cargo (cargo install blast_core). The core job is to accept a pool of local compute resources and optimally schedule forking and running of sandboxed workloads against that pool.
Architecture and Design Philosophy
BLAST is deliberately minimal in its footprint and dependencies:
- Single 7 MB binary — no Terraform, no Packer, no extra runtime dependencies
- MIT license, 3,586 lines of Rust — designed to keep enterprise security reviews as simple as possible
- Full orchestration — unlike utilities that only create sandboxes, BLAST handles scheduling, placement, snapshotting, snapshot syncing to durable storage, migration, and resource pressure management
- Cloud-compatible — built to integrate with a control plane for a unified plane across bursty cloud compute and user-provided (BYOC) compute
Core Capabilities
The REST API (served locally on port 7240 by default) exposes operations for:
- Forking VMs from base images (e.g.,
ubuntu:24.04) or from existing VM snapshots - Running sandboxed commands inside forked VMs
- Syncing data across VMs and sessions
- Monitoring VMs, sessions, and runs
- Automatic scheduling and placement of forks and runs
- Snapshot management including syncing snapshots to durable storage and migration
Deployment Model
BLAST is installed locally via the Rust package manager (cargo install blast_core) and runs as a local daemon. It is positioned as a BYOC (Bring Your Own Compute) sandbox solution, meaning users supply their own CPU, memory, and disk pool. The project is open source under the MIT License, making it freely usable, modifiable, and distributable. Source code is available at the GitHub repository under the stanford-mast organization.
Current Status
The repository was created in April 2025 and last pushed to in August 2026, indicating active development. It carries 797 stars and 53 forks on GitHub, with 7 open issues. The project is tagged with topics sandbox, service, and virtual-machine on GitHub, and the team describes itself as a "growing team of open-source sandboxing and orchestration enthusiasts."
Community Discussions
Be the first to start a conversation about BLAST
Share your experience with BLAST, ask questions, or help others learn from your insights.
Pricing
Open Source
Fully free and open-source under the MIT License. Self-hosted via a single binary installed with Cargo.
- Single 7 MB binary
- MIT License
- Full sandbox orchestration
- Fork and run sandboxed VMs
- Snapshot management
Capabilities
Key Features
- Single 7 MB binary with no extra dependencies
- Fork VMs from base images or existing VM snapshots
- Run sandboxed commands inside forked VMs
- Automatic scheduling and placement of forks and runs
- Snapshot management and syncing to durable storage
- VM migration support
- Resource pressure management
- Data sync across VMs and sessions
- Monitor VMs, sessions, and runs
- Compatible with SmolVM, Hypeman, and Docker backends
- REST API on localhost
- BYOC cloud compute integration
- MIT-licensed, 3,586 lines of Rust
