
litebox
A security-focused library OS supporting kernel- and user-mode execution

A security-focused library OS supporting kernel- and user-mode execution

Sandboxes containers via a userspace application kernel that intercepts system calls, limits host kernel access, and integrates with…

An embeddable, portable, branchable virtual machine to safely run Agents locally.

Proper sandboxing for agentic coding and web browsing

Open-source XDR and SIEM platform for threat detection, log analysis, file integrity monitoring, vulnerability assessment, and compliance management…

KubeLinter is a static analysis tool that checks Kubernetes YAML files and Helm charts to ensure the applications represented in them adhere to best…

Immutable Linux OS image optimized for running Incus containers and virtual machines, with UEFI Secure Boot, TPM 2.0 disk encryption, and automated…

A vulnerability scanner for container images and filesystems

CLI tool and library for generating a Software Bill of Materials from container images and filesystems

Capability-based WASM runtime for executing untrusted AI-generated code with enforced CPU, memory, time, I/O, and filesystem limits. Provides…

High-performance secrets scanner. CLI, Go library, Burp Suite extension, and Chrome extension. 487 detection rules with live credential validation.

Linux application sandboxing and distribution framework

Secure and fast microVMs for serverless computing.

A secure low code deception runtime framework, leveraging AI for System Virtualization.

Kata Containers is an open source project and community working to build a standard implementation of lightweight Virtual Machines (VMs) that feel…

Low-level unprivileged sandboxing tool used by Flatpak and similar projects

Zero-trust agentic AI platform. Supports SaaS and OnPrem (airgapped) deployments.

Open-source secret scanner in Rust