landlock

Per-process network monitoring for your terminal with deep packet inspection. Cross-platform, sandboxed.

Run any Linux process in a secure, unprivileged sandbox using Landlock. Think firejail, but lightweight, user-friendly, and baked into the kernel.

Lightweight, container-free sandbox for running commands with network and filesystem restrictions

The lightest AI sandbox. A process-based sandbox for Linux, no container, no VM, no privilege, no prompt injection

A Go library for the Linux Landlock sandboxing feature

A Rust library for the Linux Landlock sandboxing feature

Container-free, deny-by-default sandbox for AI coding agents. Kernel-enforced filesystem, network, and syscall isolation for Linux and macOS

Run AI coding agents in hardened container sandboxes.

Process isolation for Linux using namespaces, resource limits, cgroups, landlock and seccomp.

A lightweight command sandbox for Linux, secure-by-default, built on Landlock.

Run coding agents unattended. Agents write the code. Axocoatl writes the receipt. Claude Code, Codex or a local model in a sandbox; the host runs your checks, a different model reviews, and every run ends with a CI exit code and a signed receipt.

Linux kernel - See Landlock issues

OpenBSD unveil(2) like function in Linux using Landlock

Talk to your computer. Icebreaker transforms natural language into safe Linux actions through isolated AI brains, kernel-enforced sandboxes. An AI-native operating system with trust boundaries built in: cloud intelligence stays quarantined, privileged reasoning stays local

Go filesystem isolation via Linux landlock sandbox

炼妖壶 — run Claude Code, Codex, or any coding agent in a deny-default sandbox with VPN-only network egress. sandbox-exec + PF on macOS, Landlock/seccomp + iptables on Linux.

Restrict process execution and file access in Kubernetes Pods with Landlock

Painless Linux sandboxing API

Set of modifications for Deno to add subprocess sandboxing