A secure, kernel-enforced capability sandbox for AI agents

Unify all your MCP servers with a secure, sandboxed proxy

Alter Ego: run Linux desktop applications under a different local user

Edera Runtime Class Mutating Webhook

Proclet is an open-source sandboxing tool that gives you fast, minimal process isolation on Linux.

Parallel, isolated dev environments for humans and AI coding agents. Real containers. Real databases. Zero collisions.

⛵🔒 Run untrusted Python code safely with native Linux isolation. No containers needed.

Bubbles - lightweight Linux working environments

Safely Inspect Untrusted Code

A blazing fast and secure code exection service

ForkFS allows you to sandbox a process's changes to your file system.

A tool for running an application in an isolated network namespace, with external network access only through a SOCKS proxy.

为 Linux QQ 提供基本的存储隔离，同时集成一些其它小功能

Hacks helping with semi-almost-usable declarative NixOS sandboxing

Run windows applications in AppContainer sandbox

Automatically patch dockerd to use process isolation mode (it's better and faster)

launches and assigns programs to cgroup-specific iptables-rules

Experimental process isolation written in Rust