Harden-Runner is a CI/CD security agent that works like an EDR for GitHub Actions runners. It monitors network egress, file integrity, and process activity on those runners, detecting threats in real-time.
Simple plug-and-play Github Action to block unauthorized outbound traffic (egress) in your Github workflows
☄️ go-out - A Golang egress buster.
PowerShell scripts/GUI tools for the enterprise to harden Windows Defender Firewall via group policy (GPO). These can be used to enforce network level application whitelisting and strengthen the security posture of devices to defend against attacks such as software supply chain and can be used with privileged access workstations (PAW).
Find what egress ports are allowed
Secure proxy solution with filtering, real-time monitoring and a modern web UI.
Secure GitHub actions with 1 line of code
Secure-by-default OpenClaw on Ubuntu, with a verifiable security report
Run OpenClaw, Hermes and your own agents in microsandbox microVMs. One reviewable TOML role sets image, allowed domains and host-bound secrets. No daemon.
tethered — Runtime network egress control for Python. One function call to restrict which hosts your code can connect to.
Egress filtering for containers, Kubernetes pods, and GitHub Actions runners.
Run any project or coding agent in a sandboxed, egress-firewalled, non-root container. Drop in a config, run sluice.
[Azure Blueprint] Learn how to deploy Azure Managed Hub-Spoke using Virtual WAN and Calico Networking
Lightweight egress guard for servers.
Deploy a firewall that should allow or drop traffic based on customisable rules
Linux eBPF network kill switch for vpn apps an beyond
Guardrails to stop data exfiltration from AI coding agents
Hardened Docker sandbox for OpenAI Codex CLI with workspace-only mounts, per-project auth, and allowlisted network egress
Network simulation and security testing platform with 13 supported protocols, red team arsenal, active defense and traffic simulators
Runtime security gate for DeepSeek Harness: egress host allowlist, secret redaction in tool results, and an append-only audit log
To associate your repository with the egress-filtering topic, visit your repo's landing page and select "manage topics."