#Landlock

domcyrus

rustnet

Per-process network monitoring for your terminal with deep packet inspection. Cross-platform, sandboxed.

Zouuup

landrun

Run any Linux process in a secure, unprivileged sandbox using Landlock. Think firejail, but lightweight, user-friendly, and baked into the kernel.

fencesandbox

fence

Lightweight, container-free sandbox for running commands with network and filesystem restrictions

multikernel

sandlock

The lightest AI sandbox. A process-based sandbox for Linux, no container, no VM, no privilege, no prompt injection

GreyhavenHQ

greywall

Container-free, deny-by-default sandbox for AI coding agents. Kernel-enforced filesystem, network, and syscall isolation for Linux and macOS

89luca89

clampdown

Run AI coding agents in hardened container sandboxes.

souk4711

hakoniwa

Process isolation for Linux using namespaces, resource limits, cgroups, landlock and seccomp.