tun2socks - powered by gVisor TCP/IP stack
View HTTP/HTTPS requests made by any Linux program
The SQLite of agent sandboxes — self-hosted, E2B-compatible. One machine, sandboxes that live forever, idle costs nothing.
Linux sandboxing that doesn't get in your way
vHive: Open-source framework for serverless experimentation
A set of curated exercises to help you prepare for the CKS exam
A rule-based transparent proxy for Windows, Linux, macOS
Archived historical Apache-2.0 release of Sandbox0. Current Sandbox0 runtime development is closed source. Product and support: https://sandbox0.ai
Codex-first fork of Anthropic's defending-code-reference-harness for vulnerability discovery and patch validation
go-pcap2socks functions like a router, allowing you to connect various devices such as an XBOX, PlayStation (PS4, PS5), Nintendo Switch, mobile phones, printers and others to any SOCKS5 proxy server. Additionally, you can just start go-pcap2socks with the default direct outbound to share your VPN connection to any devices on your network.
A modern relational spreadsheet 🌈
Runtime-agnostic Kubernetes governance for AI agents: gVisor isolation, egress policy, cost controls, and offline audit verification primitives.
Self-hosted deployment platform. Give it code, get a live HTTPS URL. Supports Node.js, Python, Go, and static sites. Every deployment runs sandboxed in gVisor. Three static Go binaries, zero runtime dependencies.
Run a command in a sandbox with the same flags on every OS — one capability model compiled to Seatbelt (macOS), gVisor (Linux), and AppContainer (Windows).
A sandbox service for running untrusted, agent-authored code that reports the isolation boundary each run executed behind. Lessons, no clone needed: https://plimsollmark.github.io/plimsoll/trainers/
Security-posture-first list of sandboxes for running AI coding agents' code, ranked by isolation, egress control and secrets handling
To associate your repository with the gvisor topic, visit your repo's landing page and select "manage topics."