
holos
Declarative KVM/QEMU VM orchestration tool using YAML compose files. Manages multi-VM stacks with cloud-init, SSH, PCI passthrough, and image…

Declarative KVM/QEMU VM orchestration tool using YAML compose files. Manages multi-VM stacks with cloud-init, SSH, PCI passthrough, and image…

A lightweight command sandbox for Linux, secure-by-default, built on Landlock.

Top-level repository for LFI: Practical, Efficient, and Secure Software-based Sandboxing

Secure runtime to sandbox AI agent tasks. Run untrusted code in isolated WebAssembly environments.

Sub-millisecond VM sandboxes for AI agents via copy-on-write forking

Client-side Linux virtual machine running in the browser via WebAssembly, with Tailscale networking, Dockerfile-based custom images, and CTF…

Firecracker made simple. Spin up secure microVMs in milliseconds, from install to interactive shell in one command.

RISC-V emulator in Rust that boots Linux with JIT on ARM64/x86_64 and Sv39 virtual memory

🛡️ Windows Hello™ style facial authentication for Linux

FPGA based microcomputer sandbox for software and RTL experimentation

Immutable Linux OS image optimized for running Incus containers and virtual machines, with UEFI Secure Boot, TPM 2.0 disk encryption, and automated…

A lightweight sandboxing tool for enforcing filesystem and network restrictions on arbitrary processes at the OS level, without requiring a container.

Minimal machine architecture with LLVM compiler backend, Linux port, and virtual machine for creating self-contained software capsules that remain…

Sandboxed Execution Environment

Metasploitable3 is a VM that is built from the ground up with a large amount of security vulnerabilities.

Manage OpenClaw in your team (Enterprise) by providing it compute infrastructure, tool integration, Authentication and security primitives

Give coding agents a disposable Linux VM, not your laptop