# Server-side sandboxing: Virtual machines

DevFeed: [Server-side sandboxing: Virtual machines](<https://devfeed.tech/articles/server-side-sandboxing-virtual-machines-10040.md>)

Original publisher: [Read original article](<https://www.figma.com/blog/server-side-sandboxing-virtual-machines/>)

Author: Hongyi Hu; Max Serrano

Published: 2023-10-24T00:00:00Z

Content type: article

Language: en

Sources: [Figma Blog](<https://devfeed.tech/sources/figma-blog.md>)

Topics: [Figma](<https://devfeed.tech/topics/figma.md>), [Security](<https://devfeed.tech/topics/security.md>), [Vulnerabilities](<https://devfeed.tech/topics/vulnerabilities.md>), [Containers](<https://devfeed.tech/topics/containers.md>), [Operating system](<https://devfeed.tech/topics/operating-system.md>), [systems](<https://devfeed.tech/topics/systems.md>)

Tags: [containers](<https://devfeed.tech/tags/containers.md>), [cpu](<https://devfeed.tech/tags/cpu.md>), [engineering](<https://devfeed.tech/tags/engineering.md>), [figma](<https://devfeed.tech/tags/figma.md>), [os](<https://devfeed.tech/tags/os.md>), [security](<https://devfeed.tech/tags/security.md>), [security-engineering](<https://devfeed.tech/tags/security-engineering.md>), [security-vulnerabilities](<https://devfeed.tech/tags/security-vulnerabilities.md>), [virtual-machines](<https://devfeed.tech/tags/virtual-machines.md>)

## AI overview

This article explains how Figma uses server-side sandboxing with virtual machines to isolate workloads and reduce security risks. It examines the VM security model, including hypervisors, VM escape risks, permissions, and trade-offs compared with containers and seccomp.

## Source excerpt

With so many sandboxing options, it's daunting to choose the right one. Here, we dive into the virtual machine (VM) security model for sandboxing, including the engineering trade-offs to consider and how we use them at Figma to achieve security isolation.