Security

Running code you don’t trust is always fraught with danger. When using the Riza Code Interpreter API, we take the following precautions to make sure code execution is fully isolated.

• Code is executed inside a secure WebAssembly sandbox.
• WebAssembly modules are not shared across executions.
• By default, code sandboxes have no filesystem or network access.
• Environment variables and command line arguments must be explicitly passed into the sandbox.
• Every execution is subject to resource limits.
• Script inputs and outputs are not logged.

If you have any questions, or need to report an issue, please email us at security@riza.io.

​

Single-tenant / self-hosted

We know that hosted services don’t work for many organizations. While the developer preview is only offered as a hosted service, we’re planning on offering both a single-tenant hosted product and an self-hosted offering.

If you’re interested in either of these, please send an email to sales@riza.io or schedule a call.