AnswersPublished24 sources
Boxd Raises $2M for Persistent VMs Built for AI Coding Agents
Boxd, a Dutch cloud infrastructure startup, has raised a reported $2 million pre seed led by BlueYard Capital to provide persistent, hardware isolated VMs for developers and AI coding agents. Its central feature is live forking: Boxd says it can clone a running microVM’s memory, disk, processes and execution state i...
Published byEdited with GPT-5.6 TerraImages generated with GPT Image 2
Research answer
Key takeaways
- Boxd, a Dutch cloud infrastructure startup, has raised a reported $2 million pre seed led by BlueYard Capital to provide persistent, hardware isolated VMs for developers and AI coding agents.
- Its central feature is live forking: Boxd says it can clone a running microVM’s memory, disk, processes and execution state in milliseconds, allowing separate agents or developers to explore work from the same startin...
- The security case is architectural rather than independently benchmarked: Boxd uses KVM VMs with their own kernels instead of containers that share the host kernel, while treating guest code as untrusted.[18][20]
AI Prompt
openai.comCreate a landscape editorial hero image for this Studio Global article: What is Boxd, how much pre-seed funding has the Dutch startup raised and from which investors, who founded it, what problem is its cloud inf. Article summary: Boxd is a Dutch cloud-infrastructure startup that gives developers and AI coding agents persistent, hardware-isolated Linux virtual machines rather than short-lived containers or disposable sandboxes. Its aim is to make . Topic tags: general, general web. Style: premium digital editorial illustration, source-backed research mood, clean composition, high detail, modern web publication hero. Use reference image context only for broad subject, composition, and topical grounding; do not copy the exact image. Avoid: logos, brand marks, copyrighted characters, real person likenesses, fake screenshots, UI text, readable text, watermarks, charts with fake numbers, clic
Boxd is a Dutch startup building cloud infrastructure for software developers and AI coding agents. Its premise is that agent-driven development needs a persistent remote computer—one that retains its state and can be copied while it is running—rather than a short-lived container or disposable sandbox.4
8
The company has raised a reported $2 million pre-seed round, led by BlueYard Capital. However, Boxd’s own funding post describes the round as €2 million, so the amount is best understood as a source-level currency discrepancy rather than two separate financings.4
12
Funding, investors and founders
BlueYard Capital led the pre-seed round. Reported participants include OVNI Capital, Antler, S20 and Script Capital, along with business angels from General Intuition and other technology companies.4
Boxd was founded by Michiel Voortman, Laurentiu Ciobanu and Hidde Kehrer.3
4
The company says the capital will support team expansion and continued work on its custom virtualization engine. Its stated product direction includes quicker boots and forks, a self-serve development platform and a self-hosted offering.1
12
The problem: coding work is stateful and increasingly parallel
A coding agent does more than generate a code patch. It may install dependencies, start services, run tests, leave files and processes in progress, and work through several possible approaches. Developers encounter a similar problem when testing branches or reproducing an issue.
With disposable environments, that context must be rebuilt when work resumes. Boxd’s alternative is a durable cloud machine for each developer or agent, enabling several independent copies of an environment to proceed in parallel without starting from a fresh image each time.8
25
What a Boxd machine is
Boxd describes each machine as a KVM microVM: a Linux virtual machine with its own kernel, disk and network identity. It is not a container that shares the host kernel.17
20
The persistence matters because the machine can retain its development state between sessions. Tools, files and in-progress processes do not inherently disappear when a developer or agent pauses work. Boxd also presents SSH as the primary interface, with a machine receiving network identity and an HTTPS address.19
26
How snapshots and live forks work
A conventional image-based environment starts another machine from a stored baseline. Boxd’s live-fork concept is different: it aims to copy the state of a machine that is already executing.
According to Boxd, a fork includes the parent machine’s memory and disk, and continues with the same files, processes and execution state. That means a child machine can begin from the same point in a task and then pursue a different implementation, test path or debugging hypothesis.17
29
Boxd says these forks happen in milliseconds; funding coverage describes the capability as under 100 milliseconds or sub-second. Those are company and reporting claims, not independent performance benchmarks.10
12
A running-machine clone also has practical identity issues. Boxd notes that a clone can inherit state such as its parent’s hostname and entropy pool, which must be handled before the new machine operates normally.27
Why Boxd argues for hardware isolation
Boxd’s core security argument is based on isolation boundaries. Containers ordinarily share the host kernel, while Boxd says its KVM virtual machines have their own kernels.20 A separate guest kernel and hardware-virtualization boundary can limit the consequences of a compromised workload compared with a shared-kernel container model.
The company also explicitly treats the guest as untrusted code belonging to another user.18 That stance is especially relevant for AI-agent workflows, where agents may execute generated code, install packages or interact with unfamiliar repositories.
Boxd’s focused microVM design is intended to avoid treating a development environment as a broad, general-purpose virtual hardware stack. In principle, reducing virtual-device complexity can reduce host–guest attack surface while preserving an OS-level boundary. But there is no independent audit or benchmark in the supplied materials that quantifies a security advantage over every traditional VM, container or sandbox. The claim should therefore be read as an architectural rationale, not a universal security verdict.
What Boxd is betting on
Boxd is making a clear infrastructure bet: persistent compute, fast stateful forks and VM-level isolation will become more useful as software teams delegate longer, parallel tasks to coding agents.
For teams, the appeal is straightforward. Instead of repeatedly rebuilding an environment, an agent or developer can keep a real Linux machine alive, checkpoint it and create isolated branches of a running state. Whether that approach proves better than container-based development platforms will depend on operational cost, performance, ecosystem support and independently validated security—but it targets a real limitation of ephemeral agent environments.8
17
20
Studio Global AI
Continue your research
This page includes a source-backed answer you can continue inside Studio Global.
People also ask
What is the short answer to "Boxd Raises $2M for Persistent VMs Built for AI Coding Agents"?
Boxd, a Dutch cloud infrastructure startup, has raised a reported $2 million pre seed led by BlueYard Capital to provide persistent, hardware isolated VMs for developers and AI coding agents.
What are the key points to validate first?
Boxd, a Dutch cloud infrastructure startup, has raised a reported $2 million pre seed led by BlueYard Capital to provide persistent, hardware isolated VMs for developers and AI coding agents. Its central feature is live forking: Boxd says it can clone a running microVM’s memory, disk, processes and execution state in milliseconds, allowing separate agents or developers to explore work from the same startin...
What should I do next in practice?
The security case is architectural rather than independently benchmarked: Boxd uses KVM VMs with their own kernels instead of containers that share the host kernel, while treating guest code as untrusted.[18][20]