Security Virtualization

qemu/qemu

Official QEMU mirror. Please see https://www.qemu.org/contribute/ for how to submit changes to QEMU. Pull Requests are disabled. Please only use…

finbarr/yolobox

Let your AI go full send. Your home directory stays home.

grepular/foxcage

Run Firefox in a rootless Podman container with dropped capabilities, isolated networking, and ephemeral storage to contain sandbox escapes and…

cypherpunkarmory/userland

Main UserLAnd Repository

microsoft/litebox

A security-focused library OS supporting kernel- and user-mode execution

owasp/secure-headers-project

OWASP knowledge base and validator for HTTP security response headers, providing recommendations, statistics, and automated configuration checks.

tencentcloud/cubesandbox

Instant, Concurrent, Secure & Lightweight Sandbox for AI Agents.

yv1ing/secbox

Conducting cybersecurity testing using the pi agent in a pre-built sandbox environment.

usbarmory/tamago

Framework for compiling and executing Go applications on bare metal processors, enabling secure firmware development with reduced attack surface…

dmdhrumilmistry/security-harness

Multi-agent static application-security review harness for AI coding agents: maps codebases, hunts vulnerability classes, chains and verifies…

flatpak/flatpak

Linux application sandboxing and distribution framework

s3n4t0r-0x0/bear-c2

The exploit server for out-of-band findings. Point a target at a domain you own. Every HTTP request and every email it sends back lands in a…

navikt/cplt

Sandbox for AI coding agents. Runs Copilot CLI, Claude Code, OpenCode, Gemini CLI, Antigravity, Pi, goose or a plain shell inside a kernel-level…

nestybox/sysbox

An open-source, next-generation "runc" that empowers rootless containers to run workloads such as Systemd, Docker, Kubernetes, just like VMs.

zerobootdev/zeroboot

Sub-millisecond VM sandboxes for AI agents via copy-on-write forking

netblue30/firejail

Linux namespaces and seccomp-bpf sandbox