Seccomp Python Packages

pydeno

Run AI-generated JavaScript from Python, securely, in a sandbox: real V8 in a supervised, OS-sandboxed worker process (Seatbelt, Landlock, seccomp), with your Python functions as the only way out.

kern-sandbox

Rootless container runtime with no daemon. Runs agent tool calls and LLM-generated code in kernel-enforced containers.

cageforge

Rust sandbox for AI agents and untrusted code, inspired by OpenAI Codex. OS-enforced isolation on Linux, Windows, and macOS.

sandlock

The lightest AI sandbox. A process-based sandbox for Linux, no container, no VM, no privilege, no prompt injection

seccompy

Python bindings for Linux seccomp-BPF syscall filtering

akios

AKIOS runtime for secure AI agent execution

zygo-sdk

Warm sandboxes for function-shaped code — run untrusted code safely

enforcecore

The runtime enforcement layer for agentic AI systems.

secimport

Library-Level eBPF Sandbox for Python (Linux & macOS): syscall-level control per module.

cepheus-engine

Container escape scenario modeler — enumerate container security posture and model realistic escape paths

mephi42-seccomp

The main libseccomp repository

mimobox

Local Sandbox Runtime for AI Agents. Run AI-generated code safely with OS, Wasm, and microVM isolation.