shipped
BugRank
Debugging-focused competitive coding platform with Docker sandboxes and AI feedback.
ReactTypeScriptExpressPostgreSQLDockerNginxGemini
Overview
BugRank flips competitive coding: instead of writing solutions from scratch, you fix buggy code — with real sandboxed execution and AI analysis.
Architecture
- Frontend — React + Monaco Editor on Vercel
- Backend — Node/Express TypeScript API on a VPS
- Database — PostgreSQL (users, sessions, challenges, submissions)
Code execution
User code never runs as a privileged process on the host. Each submission:
- Writes to an isolated folder with a UUID
- Compiles and runs as an unprivileged
executoruser - Enforces a 5s time limit and 256 MB memory limit
Zero privilege-escalation incidents in the sandbox so far — the constraint is the feature.
Lessons
Security for “run user code” products is mostly about what you refuse to do on the host.