
zeroboot
Sub-millisecond VM sandboxes for AI agents via copy-on-write forking

Sub-millisecond VM sandboxes for AI agents via copy-on-write forking

A secure low code deception runtime framework, leveraging AI for System Virtualization.

Sandboxed devcontainer for running Claude Code in bypass mode safely. Built for security audits and untrusted code review.

A local sandbox for your AI agents

A Microservices-based framework for the study of Network Security and Penetration Test techniques

Ephemeral microVM sandbox for AI agents with network allowlisting, secret injection via MITM proxy, and VM-level isolation. Boots in under a second,…

WASM sandbox with capability enforcement for AI agent code. Agents can only call explicitly provided tools with defined constraints. Sandboxed…

Kernel-level eBPF sandbox for securing LLM agent tool calls made through the Model Context Protocol (MCP)

Docker-based sandbox for coding agents with isolated environments, preinstalled agent tooling, service control, and workspace bootstrap for secure…

Ultrafast CLI on Apple Silicon macOS for fast, sandboxed development and LLM agents.

Capability-based WASM runtime for executing untrusted AI-generated code with enforced CPU, memory, time, I/O, and filesystem limits. Provides…

Container escape proof-of-concept exploits for CVE-2026-80521 and CVE-2026-52910, with a disposable QEMU/Ubuntu VM harness for safe PoC execution.

Lightweight, secure Linux sandboxes for untrusted processes. Runs in the browser and on the server.


A lightweight command sandbox for Linux, secure-by-default, built on Landlock.

Controlled vulnerability research and reproduction lab for CVE-2020-14343 in PyYAML

Zero-trust sandbox for AI agents with kernel-level filesystem jail, transparent network proxy, and YAML-based policy engine to intercept and control…

Securekit is a protocol-agnostic security kernel that enforces zero-trust, sandboxed execution for AI tool use. It sits between any LLM or agent…