Security Virtualization

withsecureopensource/see

Sandboxed Execution Environment

finbarr/yolobox

Let your AI go full send. Your home directory stays home.

clawkwork/clawk

Give coding agents a disposable Linux VM, not your laptop

intellabs/kafl

A fuzzer for full VM kernel/driver targets

cert-ee/cuckoo3

Open-source automated malware analysis sandbox that runs suspicious files and URLs in isolated VMs and generates detailed behavioral reports.

harbor-framework/terminal-bench-2

Benchmark for evaluating AI agents on real-world tasks including vulnerability resolution, code debugging, and protein assembly in containerized…

microsoft/secureboot_objects

Microsoft's curated repository of secure boot objects (KeK, Db, Dbx) for firmware and runtime, enabling transparent revocation updates and…

jingkaihe/matchlock

Ephemeral microVM sandbox for AI agents with network allowlisting, secret injection via MITM proxy, and VM-level isolation. Boots in under a second,…

dockersecurityplayground/dsp

A Microservices-based framework for the study of Network Security and Penetration Test techniques

tandasat/minivisorpkg

The research UEFI hypervisor that supports booting an operating system.

qubesos/qubes-core-admin

Manages the core lifecycle of Qubes OS domains via a Python admin API, handling secure compartmentalization with Xen and exposing an event system for…

d4rksystem/vmwarecloak

A PowerShell script that attempts to help malware analysts hide their VMware Windows VM's from malware that may be trying to evade analysis.

rex-rs/rex

Rex is a safe and usable kernel extension framework that allows loading and executing Rust kernel extension programs in the place of eBPF.

davidcarliez/trustmebro

Bypass llm guardrails by confusing it with fabricated tool output.

awslabs/snapchange

Lightweight fuzzing of a memory snapshot using KVM

getkern/kern

Rootless container runtime and sandbox that launches kernel-enforced OCI images in milliseconds with no daemon, featuring resource profiles, seccomp…