Sandbox guide

CapabilitiesTeams and accounts

Audit log

A record of who did what in the account.

2 yes7 with a catch1 no6 not published

Who offers it

Part of Teams and accounts, which explains why it matters.

Fully: Cloudflare Sandbox and Runtime. With a catch: boxd, Daytona, InstaBox, Lizard, Modal, Tensorlake and Vercel Sandbox. Not at all: Sprites.

  • Cloudflare SandboxYes

    Cloudflare records every user-initiated API and dashboard action in the account audit log.

    docs-confirmed “All user-initiated actions are recorded automatically across both the Cloudflare API and dashboard.” Source

  • RuntimeYes400 days

    Every change to members, keys, money and security settings is kept at least 400 days, as CSV and over the API.

    docs-confirmed “Every change to members, keys, money and security settings is recorded in an audit log” Source

  • boxdWith a catch

    The catch: Audit logs are sold with SSO on the Custom/Enterprise line; on self-serve plans the only record is the SSH command history.

    pricing-page “SSO + audit logs” Source

  • DaytonaWith a catch

    The catch: The log exists, but exporting it for an audit is not shipped yet.

    docs-confirmed “**Compliance Export**: export logs for internal or external audits (coming soon)” Source

  • InstaBoxWith a catch

    The catch: Audit logs are listed only on the Enterprise plan.

    pricing-page “Audit logs” Source

  • LizardWith a catch

    The catch: Audit logs are Enterprise-only; the Pro plan marks them not included.

    pricing-page “RBAC & audit log” Source

  • TensorlakeWith a catch

    The catch: Audit logs are not self-serve: you ask support for them.

    docs-confirmed “access audit logs from Tensorlake, please contact us” Source

  • Vercel SandboxWith a catch

    The catch: Audit Logs are a Vercel Enterprise feature; Sandbox-specific coverage is not established.

    docs-confirmed “Audit Logs” Source

  • SpritesNo

    Note: Fly states plainly that there is no customer-facing audit log of organisation activity or staff access.

    docs-confirmed “There is no customer-facing audit log of organization activity or staff access.” Source

  • Agent 37Not published

    No audit-log page or endpoint appears in the docs; the usage and logs APIs are per instance.

    docs-confirmed “REST API reference” Source

  • BlaxelNot published

    No customer-facing audit log is documented; the security page covers platform logging.

    docs-confirmed “SOC 2, HIPAA, ISO 27001” Source

  • BoatNot published

    No audit-log page or feature appears in the docs; the dashboard keeps webhook delivery history.

    docs-confirmed “Webhook delivery history” Source

  • E2BNot published

    No audit-log page or feature appears in the docs or security pages.

    docs-confirmed “E2B has a **SOC 2 Type II** report.” Source

  • MorphNot published

    The terms promise audit logging as a security control, but no customer-facing log is published.

    docs-confirmed “audit logging / monitoring” Source

  • SandboxerNot published

    No audit-log page or endpoint appears in the docs or API; per-sandbox command history is the nearest thing.

    docs-confirmed “with a description, the steps to reproduce, and the impact you think it has.” Source

Related

Other capabilities in this feature

Where it decides the choice

The feature

Need several capabilities at once? Add more in the capability finder. Something wrong here? Use the report link at the bottom of the page.