
sogen
🪅 Windows & Linux userspace emulator

🪅 Windows & Linux userspace emulator

Sandboxed runtime for autonomous AI agents with declarative YAML policies enforcing filesystem, network, and process constraints, plus endpoint-bound…

Immutable Linux OS image optimized for running Incus containers and virtual machines, with UEFI Secure Boot, TPM 2.0 disk encryption, and automated…

Executes untrusted Python, JavaScript, and Bash in a hardened jail with 5-second, 128 MB, 0.5-core, PID and output limits.

Sandboxes containers via a userspace application kernel that intercepts system calls, limits host kernel access, and integrates with…

Gentoo overlay for security tools as well as the heart of the Pentoo Livecd

A rootless Android app that boots Alpine Linux: run containers (Podman/Docker/LXC) and GUI desktop apps.

A lightweight sandboxing tool for enforcing filesystem and network restrictions on arbitrary processes at the OS level, without requiring a container.

Run Firefox in a rootless Podman container with dropped capabilities, isolated networking, and ephemeral storage to contain sandbox escapes and…

Main UserLAnd Repository

Instant, Concurrent, Secure & Lightweight Sandbox for AI Agents.

Linux application sandboxing and distribution framework

Sandbox for AI coding agents. Runs Copilot CLI, Claude Code, OpenCode, Gemini CLI, Antigravity, Pi, goose or a plain shell inside a kernel-level…

A simple, lightweight PowerShell script that allows you to remove pre-installed apps, disable telemetry, as well as perform various other changes to…

Linux namespaces and seccomp-bpf sandbox

Rootless container runtime and sandbox that launches kernel-enforced OCI images in milliseconds with no daemon, featuring resource profiles, seccomp…

Pre-Built Vulnerable Environments Based on Docker-Compose