A lightweight process isolation tool that utilizes Linux namespaces, cgroups, rlimits and seccomp-bpf syscall filters, leveraging the Kafel BPF language for enhanced security.
☆4,113Aug 27, 2026Updated 3 weeks ago
Alternatives and similar repositories for nsjail
Users that are interested in nsjail are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- A language and library for specifying syscall filtering policies.☆366Apr 4, 2026Updated 5 months ago
- Application Kernel for Containers☆19,346Updated this week
- Low-level unprivileged sandboxing tool used by Flatpak and similar projects☆8,757Updated this week
- Linux namespaces and seccomp-bpf sandbox☆7,647Updated this week
- syzkaller is an unsupervised coverage-guided kernel fuzzer☆6,324Updated this week
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- Security oriented software fuzzer. Supports evolutionary, feedback-driven fuzzing based on code coverage (SW and HW based)☆3,381Jun 19, 2026Updated 2 months ago
- BCC - Tools for BPF-based Linux IO analysis, networking, monitoring, and more☆22,661Updated this week
- Secure and fast microVMs for serverless computing.☆36,810Updated this week
- Generate sandboxes for C/C++ libraries automatically☆1,766Updated this week
- Wrangling Untrusted File Formats Safely☆4,840Updated this week
- sandboxing and containment tool used in ChromeOS and Android☆384Updated this week
- Record and Replay Framework☆10,650Updated this week
- Fully static, unprivileged, self-contained, containers as executable binaries.☆2,517May 25, 2019Updated 7 years ago
- kCTF is a Kubernetes-based infrastructure for CTF competitions. For documentation, see☆794Mar 25, 2026Updated 5 months ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Simple Linux seccomp rules without writing any code☆533Apr 23, 2026Updated 4 months ago
- OSS-Fuzz - continuous fuzzing for open source software.☆12,657Updated this week
- A Virtual Machine Monitor for modern Cloud workloads. Features include CPU, memory and device hotplug, support for running Windows and Li…☆6,241Updated this week
- CLI tool for spawning and running containers according to the OCI specification☆13,451Updated this week
- Ignite a Firecracker microVM☆3,530Dec 7, 2023Updated 2 years ago
- High-level tracing language for Linux☆10,329Updated this week
- Linux system exploration and troubleshooting tool with first class support for containers☆8,294Apr 13, 2026Updated 5 months ago
- Some helpful preload libraries for pwning stuff.☆1,650Sep 2, 2026Updated 2 weeks ago
- A repository for learning various heap exploitation techniques.☆8,883May 15, 2026Updated 4 months ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- A toolkit for building secure, portable and lean operating systems for containers☆8,651Sep 8, 2026Updated last week
- A powerful and user-friendly binary analysis platform!☆9,097Updated this week
- A dynamic library providing Virtualization-based process isolation capabilities☆2,696Updated this week
- Userspace WireGuard® Implementation in Rust☆7,193Jun 29, 2026Updated 2 months ago
- SQL powered operating system instrumentation, monitoring, and analytics.☆23,581Updated this week
- GEF (GDB Enhanced Features) - a modern experience for GDB with advanced debugging capabilities for exploit devs & reverse engineers on Li…☆8,362Aug 20, 2026Updated 3 weeks ago
- The main libseccomp repository☆934Jul 1, 2026Updated 2 months ago
- A simple, modern and secure encryption tool (and Go library) with small explicit keys, no config options, and UNIX-style composability.☆23,625Aug 29, 2026Updated 2 weeks ago
- The easiest, and most secure way to access and protect all of your infrastructure.☆20,925Updated this week
- Bare Metal GPUs on DigitalOcean Gradient AI • AdPurpose-built for serious AI teams training foundational models, running large-scale inference, and pushing the boundaries of what's possible.
- The lightweight, fault-tolerant database built on SQLite. Designed to keep your data highly available with minimal effort.☆17,745Updated this week
- Run any Linux process in a secure, unprivileged sandbox using Landlock. Think firejail, but lightweight, user-friendly, and baked into th…☆2,295Jul 23, 2026Updated last month
- Linux Kernel Defence Map shows the relationships between vulnerability classes, exploitation techniques, bug detection mechanisms, and de…☆2,321May 24, 2026Updated 3 months ago
- Dynamic Instrumentation Tool Platform☆3,161Updated this week
- firecracker-containerd enables containerd to manage containers as Firecracker microVMs☆2,935Sep 10, 2026Updated last week
- A collection of links related to Linux kernel security and exploitation☆6,638Sep 10, 2026Updated last week
- An implementation of the TLS/SSL protocols☆4,763Updated this week