Tools

trufflesecurity/trufflehog

Find, verify, and analyze leaked credentials

firecracker-microvm/firecracker

Secure and fast microVMs for serverless computing.

michaels1011/ephemora-cell

Capability-based WASM runtime for executing untrusted AI-generated code with enforced CPU, memory, time, I/O, and filesystem limits. Provides…

mathaix/openclawmachines

Manage OpenClaw in your team (Enterprise) by providing it compute infrastructure, tool integration, Authentication and security primitives

mozillazg/ptcpdump

eBPF-based packet analyzer that captures network traffic with automatic process, container, and Kubernetes pod metadata annotation, supporting…

microsoft/mxc

Policy-driven, layered isolation and containment

getkern/kern

Rootless container runtime and sandbox that launches kernel-enforced OCI images in milliseconds with no daemon, featuring resource profiles, seccomp…

blst-security/cherrybomb

CLI tool that audits OpenAPI specifications, validates them against best practices, and runs automated security tests to detect vulnerabilities and…

google/gvisor

Sandboxes containers via a userspace application kernel that intercepts system calls, limits host kernel access, and integrates with…

kata-containers/kata-containers

Kata Containers is an open source project and community working to build a standard implementation of lightweight Virtual Machines (VMs) that feel…

zerobootdev/zeroboot

Sub-millisecond VM sandboxes for AI agents via copy-on-write forking

capsulerun/capsule

Secure runtime to sandbox AI agent tasks. Run untrusted code in isolated WebAssembly environments.

angelorc/vmsan

Firecracker made simple. Spin up secure microVMs in milliseconds, from install to interactive shell in one command.

purpleteam-labs/purpleteam-s2-containers

Stage two containers

cisco-ai-defense/defenseclaw

Security Governance for Agentic AI

mitos-run/mitos

Millisecond microVM sandbox forking for AI agents on Kubernetes. Firecracker VMs that restore from memory snapshots in milliseconds, fork a running…

safedep/pmg

PMG protects developers, AI agents from malicious open source packages using proxy, sandbox and SafeDep's threat intelligence feed.

maliceio/malice

VirusTotal Wanna Be - Now with 100% more Hipster