domcyrus / rustnet

Per-process network monitoring for your terminal with deep packet inspection. Cross-platform, sandboxed.

multikernel / sandlock

The lightest AI sandbox. A process-based sandbox for Linux, no container, no VM, no privilege, no prompt injection

Zouuup / landrun

Run any Linux process in a secure, unprivileged sandbox using Landlock. Think firejail, but lightweight, user-friendly, and baked into the kernel.

fencesandbox / fence

Lightweight, container-free sandbox for running commands with network and filesystem restrictions