cilium / cilium

eBPF-based Networking, Security, and Observability

google / gvisor

Application Kernel for Containers

cilium / ebpf

ebpf-go is a pure-Go library to read, modify and load eBPF programs and attach them to various hooks in the Linux kernel.

google / syzkaller

syzkaller is an unsupervised coverage-guided kernel fuzzer

gopherdata / gophernotes

The Go kernel for Jupyter notebooks and nteract.

blacktop / ipsw

iOS/macOS Research Swiss Army Knife

u-root / u-root

A fully Go userland with Linux bootloaders! u-root can create a one-binary root file system (initramfs) containing a busybox-like set of tools written in Go.

cloudflare / ebpf_exporter

Prometheus exporter for custom eBPF metrics

kubearmor / KubeArmor

Runtime Security Enforcement System. Workload hardening/sandboxing and implementing least-permissive policies made easy leveraging LSMs (LSM-BPF, AppArmor).

rabbitstack / fibratus

Security sensor for realtime threat detection and protection

Zouuup / landrun

Run any Linux process in a secure, unprivileged sandbox using Landlock. Think firejail, but lightweight, user-friendly, and baked into the kernel.

nanovms / ops

ops - build and run nanos unikernels

Fanju6 / NetProxy-Magisk

Based on the sing-box core, this Android proxy module supports one-click start/stop of transparent proxy and is designed for Android devices.

ccfos / huatuo

eBPF-based observability for Linux kernel & Agent sandbox 🚀🚀

kernel / kernel-images

Browsers-as-a-service for automations and web agents

prometheus / procfs

procfs provides functions to retrieve system, kernel and process metrics from the pseudo-filesystem proc.

Gnosil / semantix

semantic agent kernel which make agent efficient and self-evolve

kmesh-net / kmesh

High Performance ServiceMesh Data Plane Based on eBPF and Programmable Kernel

cordum-io / cordum

The action firewall for AI agents. Enforce policy and human approval before risky tool calls, shell commands, workflows, and production changes, with auditable evidence.

mattn / tensai

A tiny neural-network framework in pure Go with AVX2 SIMD kernels (GOEXPERIMENT=simd)

actonos / actonos

ActonOS is a single-purpose appliance operating system engineered as a customizable, self-governing AI agent kernel running 24/7.

AbolfazlTafakori / w-ui

WireGuard, AmneziaWG and OpenVPN panel for selling access — kernel-enforced quotas, expiry, device limits, subscription pages, Telegram bot, one-command install

masaleem-oss / Fengard

Kernel-enforced firewall and DNS filtering for any OpenWrt router. Parental controls, ad blocking and screen time. A Pi-hole alternative.

NomanNasirMinhas / Ringer

Static + live analysis of Windows kernel drivers: extract IOCTL codes and shared ring-buffer strings, then load the driver and verify every finding against the running system.