
qubes-core-admin
Manages the core lifecycle of Qubes OS domains via a Python admin API, handling secure compartmentalization with Xen and exposing an event system for…

Manages the core lifecycle of Qubes OS domains via a Python admin API, handling secure compartmentalization with Xen and exposing an event system for…

Executes untrusted Python, JavaScript, and Bash in a hardened jail with 5-second, 128 MB, 0.5-core, PID and output limits.

Gentoo overlay for security tools as well as the heart of the Pentoo Livecd

Microsoft's curated repository of secure boot objects (KeK, Db, Dbx) for firmware and runtime, enabling transparent revocation updates and…

GNS3 home lab documenting a segmented network with Cisco ASAv firewall, L3 core, DMZ, and an Active Directory domain for practicing networking,…

A rootless Android app that boots Alpine Linux: run containers (Podman/Docker/LXC) and GUI desktop apps.

A secure low code deception runtime framework, leveraging AI for System Virtualization.

Zero-trust agentic AI platform. Supports SaaS and OnPrem (airgapped) deployments.

Official QEMU mirror. Please see https://www.qemu.org/contribute/ for how to submit changes to QEMU. Pull Requests are disabled. Please only use…

Let your AI go full send. Your home directory stays home.

Run Firefox in a rootless Podman container with dropped capabilities, isolated networking, and ephemeral storage to contain sandbox escapes and…

Main UserLAnd Repository

OWASP knowledge base and validator for HTTP security response headers, providing recommendations, statistics, and automated configuration checks.

Instant, Concurrent, Secure & Lightweight Sandbox for AI Agents.

Conducting cybersecurity testing using the pi agent in a pre-built sandbox environment.

Framework for compiling and executing Go applications on bare metal processors, enabling secure firmware development with reduced attack surface…

Multi-agent static application-security review harness for AI coding agents: maps codebases, hunts vulnerability classes, chains and verifies…

Linux application sandboxing and distribution framework