🛡️ Automate your data backups with Sovereign Vault, ensuring secure 3-2-1 encrypted storage locally and offsite for complete data protection.

Runtime sandbox to empower DAIV agents to run arbitrary commands.

Document cleaner

LASSO — Layered Agent Sandbox Security Orchestrator. Sandboxed execution for AI coding agents with command-level policy, tamper-evident audit logging, and compliance reporting (DORA, EU AI Act).

The Kubernetes of AI Agents — A production-grade operating system for multi-tenant agent orchestration, featuring gVisor isolation, OPA policies, and deterministic execution replays.

Self-hosted deployment platform. Give it code, get a live HTTPS URL. Supports Node.js, Python, Go, and static sites. Every deployment runs sandboxed in gVisor. Three static Go binaries, zero runtime dependencies.

vHive: Open-source framework for serverless experimentation

Avtivka implements CodeAct action spaces via persistent, interruptible FaaS

AI Sandbox

go-pcap2socks functions like a router, allowing you to connect various devices such as an XBOX, PlayStation (PS4, PS5), Nintendo Switch, mobile phones, printers and others to any SOCKS5 proxy server. Additionally, you can just start go-pcap2socks with the default direct outbound to share your VPN connection to any devices on your network.

tun2socks - powered by gVisor TCP/IP stack

Container isolation for code you can't trust but have to run.

A minimalist HTTP canary honeypot server written in Go.

A secure service for running untrusted code inside isolated Docker containers via a simple HTTP API

View HTTP/HTTPS requests made by any Linux program

Sovereign AI infrastructure with multi-vault isolation for regulated environments (HIPAA, FedRAMP, air-gapped deployments)

Cropped for sing-tun library

Poor men's userspace client for one of the CTF challenges from ECSC2025.

Yoda: Post-exploitation tool using eBPF xdp / AF_XDP, running on a userspace gVisor network stack

gvisor+windivert = ok