- gVisor
Improve your container security, deliver security-imperative apps, increase security productivity, and enforce compliance. Get started What is gVisor? gVisor is an open-source Linux-compatible sandbox that runs anywhere existing container tooling does. It enables cloud-native container security and portability. gVisor leverages years of experience isolating production workloads at Google. Isolate Linux hosts from containers so you can safely run user-uploaded, LLM-generated, or third-party code. Add defense-in-depth measures to your stack, bringing additional security to your infrastructure. Fortify hosts and containers against escapes and privilege escalation CVEs, enabling strong isolation for security-critical workloads as well as multi-tenant safety. Deliver runtime visibility that integrates with popular threat detection tools to quickly identify threats, generate alerts, and enforce policies. Give your K8s, SaaS, or Serverless infrastructure additional layers of protection when
Improve your container security, deliver security-imperative apps, increase security productivity, and enforce compliance. Get started What is gVisor? gVisor is the missing security layer for running containers efficiently and securely. gVisor is an open-source Linux-compatible sandbox that runs anywhere existing container tooling does. It enables cloud-native container security and portability. gVisor leverages years of experience isolating production workloads at Google. Run Untrusted Code Isolate Linux hosts from containers so you can safely run user-uploaded, LLM-generated, or…
saved by
related reading
- Optimizing seccomp usage in gVisor - gVisorgvisor.dev
- Infisical | The modern security platform for developers and agentsinfisical.com
- Docker: Accelerated Container Application Developmentdocker.com
- Sandbox SDKsandbox.cloudflare.com
- GitHub - goharbor/harbor: An open source trusted cloud native registry project that stores, signs, and scans content. · GitHubgithub.com
- GitHub - GitGuardian/ggshield: Detect and validate 500+ types of hardcoded secrets with advanced checks. Use it as a pre-commit hook, GitHub Action, or CLI for proactive secret detection and security.github.com
- Top 22 Docker Security Best Practices: Ultimate Guideaquasec.com
- Vercel Sandboxvercel.com
- GitHub - lima-vm/lima: Linux virtual machines, with a focus on running containersgithub.com
- firecracker/docs/design.md at main · firecracker-microvm/firecrackergithub.com
- goose | Your open source AI agentblock.github.io
- A Deep Dive Into The Cloud & Application Security Ecosystemsoftwareanalyst.substack.com