Lib.rs

landlock

LSM helpers

seccompiler

seccomp-bpf jailing

wasmtime-internal-winch

INTERNAL: Integration between Wasmtime and Winch

hyperlight-host

A lightweight Virtual Machine Manager that can be hosted in an application to safely run untrusted or code within a VM partition with very low latency and overhead

dark-light

Detect if dark mode or light mode is enabled

hyperlight-component-util

Shared implementation for the procedural macros that generate Hyperlight host and guest bindings from component types

hyperlight-guest

only the essential building blocks for interacting with the host environment, including the VM exit mechanism, abstractions for calling host functions and receiving return values, and…

cap-primitives

Capability-based primitives

glycin

Sandboxed image decoding

rfs_tester

package allows you to create a temporary directory for testing purposes. You can use it to perform tests related to file operations. After the tests are finished, the temporary directory will be deleted automatically

hyperlight-wasm

that enables wasm modules and components to be run inside lightweight Virtual Machine backed Sandbox. It is built on top of Hyperlight.

capsicum

intuitive Rust bindings for the FreeBSD capsicum framework

strict-path

Handle paths from external or unknown sources securely. Minimal, restrictive, explicit API. Mathematically proves paths stay within boundaries using Rust's type system. StrictPath detects escapes…

rustwide

Execute your code on the Rust ecosystem

garden-tools

Garden grows and cultivates collections of Git trees Garden lets you define and run commands over collections of configuration-defined multi-worktree Git environments

wasmtime-wmemcheck

Memcheck implementation for Wasmtime

cylo

Secure multi-language code execution service

hyperlight-common

Hyperlight's components common to host and guest

tsk-ai

AI-powered development task delegation and sandboxing tool

hakoniwa

Process isolation for Linux using namespaces, resource limits, cgroups, landlock and seccomp

tarnish

Process isolation library with automatic panic recovery for running untrusted Rust code

wasmtime-versioned-export-macros

Macros for defining versioned exports in Wasmtime

skeld

a TUI tool for opening projects inside a restricted sandbox

rstrict

A lightweight CLI to securely exec Linux processes inside the Kernels Landlock LSM sandbox for filesystem and network access control

syd

rock-solid application kernel

wasmer-wasix

WASI and WASIX implementation library for Wasmer WebAssembly runtime

mem-isolate

Contain memory leaks and fragmentation

daytona-client

Rust client for Daytona — secure sandboxes for AI code execution

containerd-shim-wasm

building containerd shims for wasm

path_jail

A secure filesystem sandbox. Restricts paths to a root directory, preventing traversal attacks.

microsandbox-cli

microsandbox-cli implements the CLI for managing microsandbox utilities

wasmtime-cranelift-shared

Base-level integration with Wasmtime and Cranelift

rappct

Rust AppContainer / LPAC toolkit for Windows (profiles, capabilities, process launch, diagnostics)

caxton

A secure WebAssembly runtime for multi-agent systems

razel

a command executor with caching for data processing pipelines

hardened-malloc

Global allocator using GrapheneOS allocator

wasmtime-internal-wmemcheck

INTERNAL: Memcheck implementation for Wasmtime

mockforge-plugin-loader

Plugin loader with security sandboxing and validation for MockForge

rattler_sandbox

run executables in a sandbox

pontoconnect_rs

For more info, please refer to the documentation: https://documentation.ibanity.com/ponto-connect/

safecrate

A CLI tool to safely open, build, and inspect untrusted source code in isolated Docker containers, protecting your system from potentially malicious projects

plane

Session backend orchestrator for ambitious browser-based apps

webcentral

A reverse proxy that runs multiple web applications on a single server with on-demand startup, sandboxing, auto-reload, and Let's Encrypt certificates

fusabi-host

Shared host/runtime utilities for Fusabi across Scarab/Tolaria/Hibana/Phage

amg

Resume Codex sessions by git branch

zinniad

Zinnia daemon runs Zinnia modules inside Filecoin Station

birdcage

Cross-platform embeddable sandbox

microsandbox-portal

microsandbox-portal implements the side car program for executing code and commands in a microsandbox

wasm-sandbox

A secure WebAssembly sandbox with dead-simple ease of use, progressive complexity APIs, and comprehensive safety controls

appstoreconnect

client

capsicum-net

Rust bindings to FreeBSD's cap_net library

microsandbox

Rust SDK for microsandbox - secure self-hosted sandboxes for your AI agents

libloong

Rust bindings for the libloong LoongArch emulator - a high-performance 64-bit LoongArch virtual machine

proc_jail

Process execution guard for agentic systems

capsule-core

Core library for Capsule - WASM runtime for AI agent isolation

littertray

Lightweight sandboxing for tests that write to the filesystem

tabox

A sandbox to execute a program in an isolated environment and measure its resource usage

styrolite

Lightweight, programmatic sandboxing tool

wai-bindgen-wasmer

Generate WAI glue for a Rust Wasmer host

gaol

OS-level application sandboxing library

wasmer-wasix-types

WASI and WASIX types for Wasmer WebAssembly runtime

pacwrap

A package manager which facilitates Arch-based bubblewrap containers

warden-agent-lite

User-space agent streaming cargo-warden sandbox telemetry

httpjail

Monitor and restrict HTTP/HTTPS requests from processes

monocore

monocore is a secure MicroVM provisioning system for running untrusted code in isolated environments

pandora_box

Syd's log inspector & profile writer

hyperlight-wasm-aot

Application to precompile WebAssembly binaries to for hyperlight-wasm

judger

A sandboxed environment for running untrusted code safely

microsandbox-server

microsandbox-server implements the sandbox server responsible for orchestrating sandboxes

libsyd

Rust-based C library for syd interaction via /dev/syd

wasmer-wasi

WASI implementation library for Wasmer WebAssembly runtime

isolate-integration

interface for the ioi/isolate sandbox program

sprites

Official Rust SDK for Sprites - stateful sandbox environments from Fly.io

event-reporting

Shared event reporting utilities for the cargo-warden workspace

libsydtime

Rust-based C LD_PRELOAD library to replace vDSO time calls with syscalls

hakoniwa-cli

Process isolation for Linux using namespaces, resource limits, cgroups, landlock and seccomp

sbox

Tiny Linux containers implementation

boxxy

Linkable sandbox explorer

warden-bpf-api

Shared eBPF API structures for the cargo-warden sandbox

leucite

sandboxing and limiting command execution

ia-sandbox

A CLI to sandbox (jail) and collect usage of applications

aegis-wasm

Aegis - A local-first WebAssembly sandbox runtime

garden-gui

Garden grows and cultivates Git trees, GUI edition

syd-tui

Syd's Terminal User Interface

perspt-sandbox

Sandboxed command execution for Perspt

wardstone

Sandboxing system for secure tool execution (Seatbelt/Landlock) - magical containment

claude-box

A multi-platform Claude Code sandbox manager

sandkiste

Language independent scripting language sandbox API

rusty-sandbox

wasmer-runtime-near

Wasmer runtime library

iron_cage_safety

Safety guarantees and validation for iron_cage sandbox with secure defaults

iron_cage_cost

Resource cost tracking and accounting for sandboxed processes in iron_cage

starbase_sandbox

A temporary sandbox for testing file system and process operations, with fixtures support

virtual_exec

A sandbox execution environment which allowed limited execution of expression safely (WIP)

pacwrap-agent

Executable agent for conducting containerized transactions

rp_sandbox_b

Testing project -- please ignore

dictator-frontmatter

Markdown frontmatter decree for Dictator structural linter

aegis-core

Core runtime engine for the Aegis WebAssembly sandbox

antilysis

State-of-the-art dynamic analysis countering techniques on Windows

yutio-message

Send messages to a Yutio server

ironcage

Sandboxing and process isolation utilities for secure execution environments

iron_cage_cli

Command-line interface for iron_cage sandboxing framework with interactive controls

sandkasten-client

Sandkasten client library for running untrusted code

iron_agent

Sandboxed AI agent execution framework with secure isolation and resource limits

syscallz

seccomp library for rust

nsbox

A lightweight sandbox runner for Linux

zinnia_runtime

Zinnia is a runtime for Filecoin Station modules. This crate provides the runtime including all platform APIs.

runbox

Sandboxed code execution environment and runtime isolation tools

firehazard

Unopinionated low level API bindings focused on soundness, safety, and stronger types over raw FFI

qqrm-bpf-core

eBPF enforcement programs for the cargo-warden sandbox

sandkiste_lua

Sandbox for Lua scripts

qqrm-bpf-api

Shared eBPF API structures for the cargo-warden sandbox

skill-context

Execution context management for skill-engine

casper-sys

FFI bindings for FreeBSD's libcasper

js-sandbox

Execute JavaScript code from Rust in a secure sandbox, and transport data to/from JS plug-ins

xvf

Easy archive extraction

virtual_exec_type

Type definition sub-crate for virtual_exec - A sandbox execution environment which allowed limited execution of expression safely (WIP)

stemjail

Evolving jails for user activities

iron_cage_types

Type definitions and data structures for iron_cage sandboxing framework

wgex

Securely fetch, cache, and execute scripts from URLs with hash verification, TTL-based caching, and optional sandboxing. Designed for safe, repeatable script execution.

bp3d-fs

Alternative to dirs-rs with better cross platform support and support for Mac/iOS app sandbox

melbi

expressive, embeddable, sandboxed expression language

wasmer-wasi-types

WASI types for Wasmer WebAssembly runtime

hexroll3

OSR sandbox generator

microsandbox-utils

microsandbox-utils is a library containing general utilities for the microsandbox project

hardened-malloc-sys

Rust bindings for GrapheneOS allocator

rp_sandbox_c

Testing project -- please ignore

aegis-resource

Resource management for the Aegis WebAssembly sandbox

js-sandbox-ios

Execute JavaScript code from Rust in a secure sandbox, and transport data to/from JS plug-ins

nix-user-chroot

Install & Run nix without root permissions

exers

compiling and running other code in sandboxed environment

sandboxfs

A virtual file system for sandboxing

genpac

Sandbox for Gentoo ebuild development using bubblewrap

virtual_exec_parser

Parser definition sub-crate for virtual_exec - A sandbox execution environment which allowed limited execution of expression safely (WIP)

carapace

A code runner for online judge

chrootable-https

Sandbox friendly https client

catj

A light process isolation sandbox used for competitive programming contest

physics-toy-sandbox

Remixable physics playground - Rube Goldberg machine builder for Jugar

wasmer-wasi-near

WASI implementation library for Wasmer WebAssembly runtime

quarantine

qqrm-agent-lite

User-space agent streaming cargo-warden sandbox telemetry

bwrapman

Sandbox profile launcher for Bubblewrap

hexroll3-scroll

HEXROLL3 Scroll - the sandbox content generator

virtual_exec_macro

Macro definition sub-crate for virtual_exec - A sandbox execution environment which allowed limited execution of expression safely (WIP)

libriscv_sys

FFI bindings to libriscv, a fast RISC-V sandbox emulator

ardaku

WASM Environment

openphys

physics engine library written in Rust

peach

Sandbox engine for Rust, inspired by Processing

dlfile

A basic utility to download files over HTTPS

tinkoff-api

generated by openapi-generator for rust

qqrm-policy-core

Policy data model and validation for the cargo-warden sandbox

antlion

Handy way to evaluate at compile-time any Rust expression

winch-environ

Winch's function compilation environment

kata_machine

A quick way to generate a sandbox, start coding and easily test your katas across multiple languages

hyperlight-component-macro

Procedural macros to generate Hyperlight host and guest bindings from component types

yutio-rcon

Yutio remote console

wasmer-runtime-x

Wasmer runtime library

gear-sandbox-env

means to instantiate and execute wasm modules

pathio

Data type for storing generic data on a virtual path tree hierarchy. The data is stored in memory, this is not OS file system abstraction, but immitation

wasmer-runtime-unc1

Wasmer runtime library

alipay-global

Use Alipay Global in a less painful way

wasmer-runtime-l1x

Wasmer runtime library

reflexive

Handy way to evaluate at compile-time any Rust expression

wasmer-runtime-asml-fork

Wasmer runtime library

namecheap

SDK for interacting with their API

near-sandbox

launching NEAR sandbox environments

cordon

Embeddable sandboxing a-la-carte

openbanking

Open Banking client written in Rust Programming Language

yutio-server

Yutio game server

microsandbox-core

microsandbox-core is a tool for managing lightweight sandboxes and images

wasi-grpc

gRPC clients on Spin / WASI Hyperium

pacwrap-core

providing core functionality for pacwrap

yutio-client

Yutio client backend

iron_cage_core

Core sandboxing primitives and process isolation engine for iron_cage framework

shimkit-types

Types for shimkit

dhl_tracking

DHL Tracking for Business Customers

cli-sandbox

help test your CLI

bandsocks

Experimental embeddable container sandbox

yutio-common

Yutio common functionality

jsandbox

JavaScript sandbox using deno runtime

cube-engine

cube-pump protocol implementation

sandvox

The 3D voxel falling-sand game

rink-sandbox

limiting memory usage and time spent of code, and allowing interrupts (ctrl+C)

beach

Sandboxing utilities for Ocean

privsep

Privilege Separation for Rust

constant_sandbox

ruby codebases used to enforce boundaries and modularize Rails applications

pf_sandbox_lib

Data structures and helper code for PF Sandbox

flatpak-unsandbox

Run your flatpak app outside of the sandbox

judge-core

A judge library for online judge system

autoboxxy

Linkable sandbox explorer, invoke on constructor

metriport-rust

SDK for the metriport API

sandbox

A little modular sandbox game

rdom

A Rust-based simulated DOM (browser-independent replacement for web_sys)