
windows
Run Windows inside a Docker container with KVM acceleration, automatic installation, and customizable resources. Supports multiple Windows versions,…

Run Windows inside a Docker container with KVM acceleration, automatic installation, and customizable resources. Supports multiple Windows versions,…

Apple Silicon device emulator.

Official QEMU mirror. Please see https://www.qemu.org/contribute/ for how to submit changes to QEMU. Pull Requests are disabled. Please only use…

Multi-Cloud Security Auditing Tool

Linux namespaces and seccomp-bpf sandbox

Linux application sandboxing and distribution framework

A lightweight sandboxing tool for enforcing filesystem and network restrictions on arbitrary processes at the OS level, without requiring a container.

Automate the creation of a lab environment complete with security tooling and logging best practices

Main UserLAnd Repository

Isolated JavaScript sandbox for Node.js that runs untrusted code with restricted access to built-in modules and host resources via Proxy-based…

Source code of a multiple series of tutorials about the hypervisor. Available at: https://rayanfam.com/tutorials

A secure low code deception runtime framework, leveraging AI for System Virtualization.

Framework for compiling and executing Go applications on bare metal processors, enabling secure firmware development with reduced attack surface…

Run Coding Agents in Sandboxes. Control Them Over HTTP. Supports Claude Code, Codex, OpenCode, and Amp.

The materials of "Hypervisor 101 in Rust", a one-day long course, to quickly learn hardware-assisted virtualization technology and its application…

Immutable Linux OS image optimized for running Incus containers and virtual machines, with UEFI Secure Boot, TPM 2.0 disk encryption, and automated…

Sandboxed Execution Environment