Library-Level eBPF Sandbox for Python (Linux & macOS): syscall-level control per module.

Build custom Docker seccomp profiles for containers by finding syscalls it uses.

BPF Processor for IDA Python

Secure runtime for multi-agent AI. Kernel sandboxing (seccomp-bpf), real-time PII redaction, Merkle audit trails.

Lightweight runtime enforcement for agentic AI. PII masking, policy checks, and Merkle audit trails as a decorator.

🐍 Python facilitation wrapper to embed 🔒 Zenroom

Experiments with unshare

Advanced Python Security Sandbox with TUI

Runtime seccomp-style per-call capability sandbox for installable agent skills — declare what each skill may touch, enforce it at the call site, trap+log violations.

Trace-and-learn containerizer that turns Linux installers into hardened Podman containers.

My 'Advanced container deep-dive workshop at DevConf Container Roadshow 2017.

ASU CSE466 Computer Systems Security (pwn.college): locally-runnable, verified educational labs — shellcoding, reverse engineering, memory corruption, SROP, seccomp sandboxing, setuid program-misuse

Container escape scenario modeler — enumerate container security posture and model realistic escape paths

AI agent interaction security framework and MCP Tool Gateway — declared trust boundaries, signed two-key approvals, runtime reconciliation

Trace-driven Seccomp profile generator and validator for Docker

Secure remote code execution & online-judge platform — hardened Docker sandboxing, distributed Celery workers, live verdict streaming. Django + React.

Automate seccomp filter generation in your CI pipeline

A mini Linux container runtime in C using namespaces, cgroups v2, OverlayFS, pivot_root, veth networking, and seccomp.

Flask demo for presentation at Devops NG on Linux container hardening