matchlock github.com ↗
A Firecracker-based VM sandbox for agents that injects secrets into network requests via placeholders.
ToolSecurity & privacyfirecrackermicrovmagent-sandbox
Recommended in 1 thread
OpenShell – A safe, private runtime for fleets of autonomous AI agentsgithub.com ·
Combines real VM isolation with secret placeholders so agents never see keys.
Similar tools
- sandbox-runtime ↗Security & privacy1 thread
Anthropic's lightweight sandbox for restricting filesystem and network access of processes.
- 1 thread
- Include Security ↗Security & privacy1 thread
A security consultancy offering penetration testing and application security reviews.
- 1 thread
- 1 thread
- OneCRL ↗Security & privacy1 thread
Mozilla's centrally pushed list of revoked intermediate certificates for Firefox.
- 2 threads
- Lockdown Mode ↗Security & privacy2 threads
An optional iOS hardening mode that restricts attachments, web features and connections.
Also in Security & privacy
- 2 threads
- 2 threads
- Convergence ↗2 threads
Moxie Marlinspike's 2011 proposal for client-chosen notary-based TLS certificate verification.
- Ente Photos2 threads
An end-to-end encrypted photo storage service.
- Lockdown Mode ↗2 threads
An optional iOS hardening mode that restricts attachments, web features and connections.
- Paranoid Crypto ↗2 threads
Google's open-source library for detecting weaknesses in cryptographic keys and signatures.
- 2 threads
- Tor2 threads
An anonymity network that routes traffic through volunteer relays.
- YubiKey2 threads
A hardware security key supporting FIDO2, PIV and OpenPGP.
- 1Password ↗1 thread
A commercial password manager with a built-in SSH agent that can be unlocked with Touch ID.
- ACME Renewal Information1 thread
An ACME extension that lets CAs tell clients when to renew certificates early.
- AWS WAF1 thread
Amazon's managed web application firewall service.
Link from a commenter, not checked or endorsed by us: ↗ https://github.com/jingkaihe/matchlock