Show HN: Riza – Safely run untrusted code from your app

{
  "by": "conroy",
  "descendants": 6,
  "id": 40212741,
  "kids": [
    40213811,
    40212816,
    40233256,
    40212997
  ],
  "score": 11,
  "text": "Hi HN, I’m Kyle and together with Andrew (<a href=\"https:&#x2F;&#x2F;news.ycombinator.com&#x2F;user?id=stanleydrew\">https:&#x2F;&#x2F;news.ycombinator.com&#x2F;user?id=stanleydrew</a>) we’ve been working on Riza (<a href=\"https:&#x2F;&#x2F;riza.io\" rel=\"nofollow\">https:&#x2F;&#x2F;riza.io</a>), a project to make WASM sandboxing more approachable. We’re excited to share a developer preview of our code interpreter API with HN.<p>There’s a bit of a backstory here. A few months ago, an old coworker reached out asking how to execute untrusted code generated by an LLM. Based on our experience building a plugin system for sqlc (<a href=\"https:&#x2F;&#x2F;sqlc.dev\" rel=\"nofollow\">https:&#x2F;&#x2F;sqlc.dev</a>), we thought a sandboxed WASM runtime would be a good fit. A bit of hacking later, we got everything wired up to solve his issue. Now the API is ready for other developers to try out.<p>The Riza Code Interpreter API is an HTTP interface to various dynamic language interpreters, each running inside a WASM sandbox without access to the outside world (for now). We modeled the API to align with a POSIX shell-style interface.<p>We made a playground so you can try it out without signing up: <a href=\"https:&#x2F;&#x2F;riza.io\" rel=\"nofollow\">https:&#x2F;&#x2F;riza.io</a><p>The API documentation lives here: <a href=\"https:&#x2F;&#x2F;docs.riza.io\" rel=\"nofollow\">https:&#x2F;&#x2F;docs.riza.io</a><p>There are many limitations at the moment, but we expect to rapidly expand capabilities so that programs can e.g. access the network and filesystem. Our roadmap has more details: <a href=\"https:&#x2F;&#x2F;docs.riza.io&#x2F;reference&#x2F;roadmap\" rel=\"nofollow\">https:&#x2F;&#x2F;docs.riza.io&#x2F;reference&#x2F;roadmap</a><p>If you need to execute LLM-generated code we’d love to have you try the API and let us know if you run into any issues. You can email us directly at [email protected].",
  "time": 1714493982,
  "title": "Show HN: Riza – Safely run untrusted code from your app",
  "type": "story",
  "url": "https://riza.io/developer-preview"
}

{
  "author": null,
  "date": null,
  "description": "Riza is the production-ready isolated runtime for untrusted code.",
  "image": "https://riza.io/images/og-generated/homepage-1cc1b22d4963ccc5523f9bb9f4192f95.png",
  "logo": null,
  "publisher": "Riza",
  "title": "AI writes code. Riza runs it.",
  "url": "https://riza.io/"
}

{
  "url": "https://riza.io/",
  "title": "AI writes code. Riza runs it.",
  "description": "AI writes code. Riza runs it.Riza makes AI applications more powerful and reliable by giving LLMs the ability to run code. 1import rizaio 2 3riza = rizaio.Riza() 4 5response = riza.command.exec( 6 ...",
  "links": [
    "https://riza.io/",
    "https://riza.io/developer-preview"
  ],
  "image": "https://riza.io/images/og-generated/homepage-1cc1b22d4963ccc5523f9bb9f4192f95.png",
  "content": "<div><div><div><p><span>AI writes code. <br />Riza runs it.</span></p><div><p>Riza makes AI applications more powerful and reliable by giving LLMs the ability to run code.</p></div></div><div><pre><p><span> 1</span><span>import</span><span> rizaio</span></p><p><span> 2</span><span>\n</span></p><p><span> 3</span><span>riza </span><span>=</span><span> rizaio</span><span>.</span><span>Riza</span><span>(</span><span>)</span><span></span></p><p><span> 4</span><span>\n</span></p><p><span> 5</span><span>response </span><span>=</span><span> riza</span><span>.</span><span>command</span><span>.</span><span>exec</span><span>(</span><span></span></p><p><span> 6</span><span>  code</span><span>=</span><span>\"print('Hello, World!')\"</span><span>,</span><span></span></p><p><span> 7</span><span>  language</span><span>=</span><span>\"python\"</span><span>,</span><span></span></p><p><span> 8</span><span></span><span>)</span><span></span></p><p><span> 9</span><span></span><span>print</span><span>(</span><span>response</span><span>.</span><span>stdout</span><span>)</span><span></span></p><p><span>10</span><span></span></p></pre></div></div><section><p><span><p>Speed and power, with control. <span>Let AI run code fast without risking your systems.</span></p></span></p></section><div><div><p><img src=\"https://riza.io/v2/graphics/homepage-secure.svg\" /></p><div><p><span>Secure isolation &amp; control</span></p><p>Never risk your production environment or secrets. Run AI code on Riza, and configure env variables and network access each time code runs.</p></div></div><div><p><img src=\"https://riza.io/v2/graphics/homepage-10-ms.svg\" /></p><div><p><span>No cold starts</span></p><p>Code starts executing &lt;10ms after Riza gets it. No sandbox start-up or deploy needed.</p></div></div><div><p><img src=\"https://riza.io/v2/graphics/homepage-api-first.svg\" /></p><div><p><span>API-first design</span></p><p>Access all features through thoughtfully designed RESTful API endpoints. Plus, <a target=\"_blank\" href=\"https://docs.riza.io/getting-started/client-libraries\">SDKs</a> for Python, TypeScript, and Go.</p></div></div></div><div><p><img src=\"https://riza.io/images/wordware.svg\" /></p><div><p><span>“</span></p><p><span>We need to safely run code with different Python packages for each customer. Our AWS Lambda-based solution wasn’t cutting it. Riza made secure custom environments a breeze.</span><span>”</span></p></div><div><p><img src=\"https://riza.io/images/robert-chandler.jpeg\" alt=\"Image of Robert Chandler\" /></p><p><span>Robert Chandler</span><span>CTO, Wordware</span></p></div></div><div><section><p><span><p>Serious Scale. <span>Riza executes LLM-generated code billions of times per month for AI-native companies.</span></p></span></p></section><div><div><p>1</p><p><span>Your LLM writes code</span></p><p>The latest frontier models perform well at generating TypeScript and Python.</p></div><div><p>2</p><p><span>You POST the code to Riza</span></p><p>Use our REST APIs or SDKs. Configure stdin, files, network access, and environment variables in your request.</p></div><div><p>3</p><p><span>Riza safely runs the code and returns the output</span></p><p>Your response includes execution information, including exit code, stdout, and stderr.</p></div></div><div><p><img src=\"https://riza.io/v2/dark-brown-lines.svg\" /></p></div><div><div><p><span>“</span></p><p><span>We use Riza to run Python millions of times a day. That means our engineering team can stay focused on building the product, rather than managing low-level code isolation.</span><span>”</span></p></div><div><p><img src=\"https://riza.io/images/todd.jpeg\" alt=\"Image of Todd Berman\" /></p><p><span>Todd Berman</span><span>CEO, Hyperscout</span></p></div></div></div><div><section><p><span>Unlock new capabilities in your AI apps</span></p></section><div><p><img src=\"https://riza.io/v2/graphics/terminal-icon-agent.svg\" /></p><p><span>Let agents run code and write tools</span></p><p><span><p>LLMs can write code, but can’t safely execute their code without human review and make their code reusable. Riza provides the AI-first infrastructure that makes agents more capable, reliable, and efficient.</p><p>Plus, empower agents to write their own tools.</p></span></p><p><a target=\"_blank\" href=\"https://riza.io/blog/self-learning-agent\">See an example </a></p></div></div><div><section><p><span>Scale on our cloud or yours</span></p></section><section><div><div><p><span>Easy to bring on-prem</span></p><p>For those who want even more control, self-host Riza on your own infrastructure in minutes. With the same seamless experience as our cloud.</p></div><div><p><span>Trusted at scale</span></p><p>AI-native companies rely on us to power enterprise workloads, handling billions of code executions per month.</p></div><div><p><span>Effortless operations</span></p><p>Deployed as a horizontally-scalable Kubernetes service, no DevOps engineers were harmed in the making of this film.</p></div></div><p><a target=\"_blank\" href=\"https://docs.riza.io/self-hosting/quickstart\">Start self-hosting </a></p></section></div><div><p><span>Ready to get started?</span></p><p>Sign up and get started for free. Or get in touch with us to learn more.</p></div></div>",
  "author": "",
  "favicon": "https://riza.io/v2/favicon.ico",
  "source": "riza.io",
  "published": "",
  "ttr": 74,
  "type": "website"
}