
smolvm
An embeddable, portable, branchable virtual machine to safely run Agents locally.

An embeddable, portable, branchable virtual machine to safely run Agents locally.

Sandboxes containers via a userspace application kernel that intercepts system calls, limits host kernel access, and integrates with…

Microsoft's curated repository of secure boot objects (KeK, Db, Dbx) for firmware and runtime, enabling transparent revocation updates and…

🔎 Static code analysis engine to find security issues in code.

Policy-driven, layered isolation and containment

A repo to conduct vulnerability enrichment.

Builds a hermetic, reproducible confidential VM image for secure inference and custom compute on AMD SEV-SNP and Intel TDX, with auditable…

Service that builds enrolled open-source repositories in isolated offline VMs and scans them for security vulnerabilities, emailing findings with…

Sandboxed runtime for autonomous AI agents with declarative YAML policies enforcing filesystem, network, and process constraints, plus endpoint-bound…

Kata Containers is an open source project and community working to build a standard implementation of lightweight Virtual Machines (VMs) that feel…

Sandbox for AI coding agents. Runs Copilot CLI, Claude Code, OpenCode, Gemini CLI, Antigravity, Pi, goose or a plain shell inside a kernel-level…

Secure and fast microVMs for serverless computing.

Gentoo overlay for security tools as well as the heart of the Pentoo Livecd

Instant, Concurrent, Secure & Lightweight Sandbox for AI Agents.

OWASP knowledge base and validator for HTTP security response headers, providing recommendations, statistics, and automated configuration checks.

A security-focused library OS supporting kernel- and user-mode execution

An ArchLinux based distribution for penetration testers and security researchers.

A durable process per agent, with memory that survives restarts