Yes. With Cosmonic Control, WebAssembly components and containers run side-by-side in the same Kubernetes cluster. This hybrid model lets you keep your trusted containerized workloads while adopting WebAssembly for high-density, low-latency, and secure workloads. Both share the same ingress/egress, observability, and CI/CD systems, so you can gradually migrate to Wasm-native microservices without disrupting existing workflows. For platform engineers, this means extending Kubernetes with a next-generation runtime layer that offers sub-millisecond startup times, tighter sandboxing, and drastically lower compute costs.

Cosmonic Control integrates out of the box with popular CI/CD tools like GitHub Actions, ArgoCD, and Backstage, enabling declarative, signed, and immutable deployments. You can continue using your existing automation pipelines — just add Wasm components as new deployable artifacts. This approach gives platform teams a GitOps-friendly workflow where every deployment is traceable, secure, and auditable. By integrating with familiar systems, Cosmonic Control eliminates the need for new tools while accelerating delivery speed, ensuring consistent environments across clouds, edges, and on-premises deployments.

Cosmonic Control includes first-class observability with OpenTelemetry, unifying logs, metrics, and traces across both containers and WebAssembly components. Platform teams gain full visibility into performance, latency, and resource utilization — all accessible through the same dashboards you already use with Prometheus, Grafana, or other monitoring stacks. This deep integration helps operators detect anomalies faster, maintain compliance, and optimize performance without retraining or adopting new tooling. Cosmonic Control makes Wasm workloads observable, debuggable, and manageable within the same telemetry fabric as Kubernetes.

Cosmonic Control dramatically improves resource efficiency with scale-to-zero workloads, sub-millisecond cold starts, and ultra-dense scheduling. Traditional containerized environments often waste up to 80% of CPU due to idle infrastructure. By contrast, Wasm components under Cosmonic Control start in microseconds and consume minimal memory, allowing thousands of workloads to run per node. The result is lower cloud bills, higher cluster utilization, and reduced redundancy. For IT executives, this means cutting operational costs without compromising reliability — achieving true cost-efficient compute at scale.

Cosmonic Control introduces capability-based zero trust isolation to Kubernetes. Each WebAssembly component runs inside a secure, shared-nothing sandbox that enforces least privilege by design. Unlike containers that share broad system-level access, Wasm workloads only receive explicit capabilities — such as network, file, or messaging access — defined declaratively. This reduces the attack surface, prevents lateral movement, and enforces memory safety at runtime. Combined with Kubernetes’ native RBAC, admission, and policy controls, Cosmonic Control gives your platform defense-in-depth security for modern, multi-tenant workloads.

Cosmonic Control is a Kubernetes-native WebAssembly control plane that integrates seamlessly with your existing clusters, namespaces, and RBAC policies. There’s no need to replace or reconfigure your infrastructure — Cosmonic Control installs directly into your current Kubernetes environment using Custom Resource Definitions (CRDs) and an Operator. It works with your existing ingress, observability, and CI/CD tooling, making it easy for platform engineers to add WebAssembly components alongside containers without introducing new operational overhead. This means your existing governance, pipelines, and policies continue to function exactly as before — just faster, lighter, and more secure.

Cosmonic Control enables enterprises to future-proof their platform architecture by bridging today’s container ecosystems with tomorrow’s WebAssembly-native systems. Because Wasm components are portable, composable, and language-agnostic, workloads can run anywhere — from cloud to on-premises to edge environments — without code changes. This empowers chief architects to design cloud-agnostic, modular systems that evolve over time without being locked into legacy infrastructure or vendor-specific runtimes. Cosmonic Control is your bridge to the next epoch of platform engineering — one that’s secure, efficient, and built for continuous innovation.

Sandbox MCP is a free and open-source plugin built on CNCF wasmCloud that lets you generate standards-compliant Model Context Protocol (MCP) servers as secure WebAssembly components.

It gives you a repeatable way to build MCP tools that are secure by default, portable, composable, and sandboxed—perfect for safely extending LLMs and agentic systems.

Lear more at SandboxMCP.ai