Running code you don’t trust is always fraught with danger. When using the Riza Code Interpreter API, we take the following precautions to make sure code execution is fully isolated.

  • Code is executed inside a secure WebAssembly sandbox.
  • WebAssembly modules are not shared across executions.
  • By default, code sandboxes have no filesystem or network access.
  • Environment variables and command line arguments must be explicitly passed into the sandbox.
  • Every execution is subject to resource limits.
  • Script inputs and outputs are not logged.

If you have any questions, or need to report an issue, please email us at security@riza.io.

Single-tenant / self-hosted

We know that hosted services don’t work for many organizations. While the developer preview is only offered as a hosted service, we’re planning on offering both a single-tenant hosted product and an self-hosted offering.

If you’re interested in either of these, please send an email to sales@riza.io or schedule a call.