---
title: "Dev and notebook hosting · Ataris"
description: "Hosted IDEs and notebooks give anyone a shell. Some use it to send spam, scan the internet, or mine. Ataris watches every workspace from the host and opens a case when one does."
canonical: "https://ataris.dev/use-cases/dev-hosting"
last-updated: 2026-11-02
---
# A shell for everyone, abuse for no one.

Hosted IDEs and notebooks give anyone a shell. Some use it to send spam, scan the internet, or mine. Ataris watches every workspace from the host and opens a case when one does.

## A browser tab with a root shell behind it.

Dev environments run for hours, expose ports, and look busy. Abuse hides well there, except from the host.

### 1. Watch: Every workspace.

Flows and counters for each workspace, per account, from the host.

Example (ws-4b2): listening = :8080 public; smtp = burst.

### 2. Detect: Spam, scans, and mining.

The same host-side rules as any sandbox, tuned for long-lived workspaces.

Example (ws-4b2 · rules): outbound spam = MATCH; cryptomining = no match.

### 3. Decide: Review, then act.

Report-only cases, linked to the account, for your trust & safety team.

Example (CASE #0452): account = free plan.

## For dev and notebook hosting.

Fits long-lived, interactive workspaces.

- **Abuse.** From workspaces. outbound spam, scanning, cryptomining, egress abuse.
- **Context.** Joined to cases. account plan, signup data.
- **Deploy.** On your hosts. Helm or Linux package, no workspace agent.

## Related

- [Scanning and spam](https://ataris.dev/use-cases/network-abuse.md): Port scans, spam, egress abuse
- [Free-tier abuse](https://ataris.dev/use-cases/free-tier-abuse.md): Farmed credits and repeat signups
- [Abuse detection](https://ataris.dev/product/abuse-detection.md): Mining, scanning, spam, farmed free tiers

## Keep workspaces open to everyone.

Book a demo and we'll walk through abuse detection for hosted workspaces.

[Book a demo](https://ataris.dev/contact)