Sandboxing Python Packages

microsandbox

🧱 secure, local and programmable sandboxes for AI agents

bandsox

Sanboxes for AI agents and humans

sandlock

The lightest AI sandbox. A process-based sandbox for Linux, no container, no VM, no root.

akios

Secure runtime for multi-agent AI. Kernel sandboxing (seccomp-bpf), real-time PII redaction, Merkle audit trails.

bunkervm

Hardware-isolated Linux sandbox for AI agents — Firecracker MicroVM + MCP

enforcecore

Lightweight runtime enforcement for agentic AI. PII masking, policy checks, and Merkle audit trails as a decorator.

sandwine

:wine_glass: Command-line tool to run Windows apps with Wine and bwrap/bubblewrap isolation on Linux

packj

Packj stops :zap: Solarwinds-, ESLint-, and PyTorch-like attacks by flagging malicious/vulnerable open-source dependencies ("weak links") in your software supply-chain

codesafe

An open-source Python library for code encryption, decryption, and safe evaluation using Python's built-in AST module, complete with allowed functions, variables, built-in imports, timeouts, and blocked access to attributes.

branchcontext

Unified branching for speculative execution: filesystem, process, and memory

csc-runner

Bounded shell and CLI execution for AI agents: structured contracts, policy-gated execution, hardened Linux runtime enforcement, and signed receipts.

nervos-sandbox

Hardware-isolated Linux sandbox for AI agents — Firecracker MicroVM + MCP