
gvisor
Sandboxes containers via a userspace application kernel that intercepts system calls, limits host kernel access, and integrates with…

Sandboxes containers via a userspace application kernel that intercepts system calls, limits host kernel access, and integrates with…

PMG protects developers, AI agents from malicious open source packages using proxy, sandbox and SafeDep's threat intelligence feed.

Instant, Concurrent, Secure & Lightweight Sandbox for AI Agents.

Capability-based WASM runtime for executing untrusted AI-generated code with enforced CPU, memory, time, I/O, and filesystem limits. Provides…

Secure and fast microVMs for serverless computing.

Sub-millisecond VM sandboxes for AI agents via copy-on-write forking

Your agent is a security risk, so treat it like one. yoloAI does AI agent sandboxing right.

Secure runtime to sandbox AI agent tasks. Run untrusted code in isolated WebAssembly environments.

Give coding agents a disposable Linux VM, not your laptop

Ephemeral microVM sandbox for AI agents with network allowlisting, secret injection via MITM proxy, and VM-level isolation. Boots in under a second,…

Securekit is a protocol-agnostic security kernel that enforces zero-trust, sandboxed execution for AI tool use. It sits between any LLM or agent…

Manage OpenClaw in your team (Enterprise) by providing it compute infrastructure, tool integration, Authentication and security primitives


Run untrusted AI code safely, fast

veinmind-tools 是由长亭科技自研,基于 veinmind-sdk 打造的容器安全工具集