Paste untrusted or AI-generated code and see what it actually does in a disposable sandbox — before it touches your machine.
ℹ️ What is this? How it works & limits
SafeRun runs untrusted or AI-generated code in a throwaway cloud sandbox and tells you, in plain English, what it actually did — before it ever touches your machine. You can scan pasted Python, an npm package, or a PyPI package.
What is Solari? Solari provides the disposable, hardware-isolated cloud VM each scan runs in. Your code executes there, never on your computer, and the VM is destroyed right after.
Which AI writes the verdict? Claude, via the Anthropic API. You bring your own Anthropic key; scans use claude-haiku-4-5 by default (cheap and fast). Any Anthropic model works — the key and model are yours, so you control the cost.
Limits & caveats:
- It runs your code, so very heavy or long-running code may hit a ~60-second timeout.
- Max input size is 200 KB (a few thousand lines). It's about run time, not line count.
- Python wheels run no install-time code, so they correctly show as clean.
- Shell-only install scripts (e.g.
curl) aren't traced at the syscall level; Node- and Python-level behavior is. - Your Solari and Anthropic keys stay in your browser and are used only to run your scan — never stored or logged.
- Best-effort behavioral check, not a security guarantee.
SafeRun runs every scan with your Solari and Anthropic keys. They are stored only in this browser and sent to the server just to run your scan — never saved or logged.