
CubeSandbox
Instant, Concurrent, Secure & Lightweight Sandbox for AI Agents.

Instant, Concurrent, Secure & Lightweight Sandbox for AI Agents.

The StackRox Kubernetes Security Platform performs a risk analysis of the container environment, delivers visibility and runtime alerts, and provides…

eBPF-based Security Observability and Runtime Enforcement

Kata Containers is an open source project and community working to build a standard implementation of lightweight Virtual Machines (VMs) that feel…

The system of action for AI-native cybersecurity—where intent becomes governed execution, evidence becomes operational memory, and every operation…

Workload identity platform that attests running services, issues SPIFFE IDs/SVIDs, and enables mTLS and JWT authentication for Kubernetes,…

Enforce security and compliance on Kubernetes clusters via admission controls, resource mutation, background scans, and container image signature…

A repo to automatically generate and keep updated a series of Docker images through GitHub Actions.

A collection of challenge based hack-a-thons including student guide, coach guide, lecture presentations, sample/instructional code and templates. …

JumpServer is an open-source Privileged Access Management (PAM) platform that provides DevOps and IT teams with on-demand and secure access to SSH,…

An embeddable, portable, branchable virtual machine to safely run Agents locally.

Chaos testing, network emulation, and stress testing tool for containers

Access control for AI agents. Set what Claude Code, Codex, Gemini, Cursor and any MCP server are allowed to do, review risky actions before they run,…

Vulnerability scanner written in Go which uses the data provided by https://osv.dev

Self-hosted runtime control plane for AI agents. Observe or HITL approve or Block rogue tool calls before it executes: secret leaks, prompt…

Vulnerable app with examples showing how to not use secrets

An open source, cloud-native security to protect everything from build to runtime

Declarative policy engine that enables authorization and policy enforcement across services, Kubernetes, Terraform, Docker, and APIs using the Rego…