Libraries & frameworks
sandboxed-api
google/sandboxed-api
Google's C/C++ sandboxing library built on Sandbox2 that automatically isolates individual libraries from the main program to contain vulnerabilities.
Topics
Related projects
vm24.1kAn in-process Node.js sandbox library that isolates untrusted JavaScript through proxies and module allowlists, letting applications execute external scripts with restricted access.
terraform-aws-secure-baseline1.2kA Terraform module that hardens an AWS account to CIS and AWS Foundational Security baselines, covering IAM, logging, monitoring, networking, and encryption defaults.
prowler15.2kProwler is an open-source cloud security and compliance platform with thousands of built-in checks and compliance frameworks. It scans AWS, Azure, GCP, Kubernetes and other environments, offering a CLI, a self-hosted local server and AI-assisted capabilities.
microsandbox9kA fast local-first microVM runtime and SDK for running untrusted AI agents, code, and automation in hardware-isolated sandboxes.
Harden-Windows-Security4.8kA Windows hardening suite with Microsoft Store apps and guides that apply official Microsoft security features, configure App Control and raise system security across personal and enterprise devices.
nanos3.2kNanos is a minimal unikernel engineered to run a single application inside a virtual machine, deliberately omitting multi-process support, users and remote administration to deliver small, fast and isolated deployment images.