Is a safe place for running semi-trusted programs or scripts. The sandbox security model provides a tightly controlled set of resources for foreign programs to run in, such as a small “scratch-space” on the disk and a section of memory to carry out instructions.