Sandboxie Plus

Active
GitHub C GPL-3.0

Description

Sandboxie-plus is a Windows sandbox execution tool that isolates untrusted programs, used by agents to run untrusted code safely.

Key Features

  • Windows sandbox — isolates apps from the host, no contamination
  • Snapshot / revert — file system is reverted when the sandbox ends
  • Network isolation — sandboxed processes can be limited to specific networks
  • Transparent — runs apps in the sandbox without modification
  • Agent-friendly — agent tool calls can be bounded to the sandbox
  • Enterprise management — multi-user sandbox policy distribution

Use Cases

💡 Letting AI agents execute user-supplied untrusted code safely
💡 Isolating suspicious programs or downloaded files on Windows
💡 Disposable runtime environments for development
💡 Isolated dynamic-analysis environments for security research

Strengths & Limitations

Strengths

  • Actively maintained, recent updates
  • High community interest (19.3k stars)

⚠️ Limitations

  • Restrictive license (GPL-3.0)

Quick Start

# Download the installer from
# https://github.com/sandboxie-plus/Sandboxie/releases
# After install:
SbStart.exe cmd /c whoami

Related Projects

landrun

2.3k · Go
Normal A

landrun is a lightweight, Landlock-based Linux process sandbox that runs any program under tight capability isolation without requiring root.

sandboxlandlocklinux +2
  • · Landlock kernel isolation - leverages Linux 5.13+ Landlock LSM for filesystem access control
  • · No-root deployment - regular users can launch sandboxes without sudo or privileged containers
  • · Fine-grained policy - declare readable, writable, and executable directory sets from the CLI

Wuying AgentBay SDK

1.1k · Python
Normal A

Wuying AgentBay SDK is a cloud sandbox built for AI agents, providing secure isolated execution environments for agents to safely run code and operations in the cloud, suitable for production-grade agent applications requiring sandboxed execution.

sandboxcloud-executionsecurity +1
  • · On-demand cloud sandboxes with second-level startup — create, use, and destroy isolated environments instantly
  • · Four capability modes: browser automation, desktop app control, mobile UI testing, and code execution
  • · Multi-language SDKs: Python, TypeScript, Golang, and Java — full coverage

OpenSandbox

14.9k · Go
Active A

OpenSandbox is an open-source, secure, fast, and extensible sandbox runtime for AI agents, developed by Alibaba.

sandboxai-infrastructurekubernetes +2
  • · Multi-language SDKs: Python, Java/Kotlin, JavaScript/TypeScript, C#/.NET, and Go with unified sandbox APIs
  • · Docker and Kubernetes runtimes: built-in lifecycle management for both local development and large-scale distributed scheduling
  • · Strong isolation: supports gVisor, Kata Containers, and Firecracker microVM secure container runtimes