SaaSHub helps you find the best software and product alternatives Learn more →
Top 23 Rust Sandbox Projects
-
Project mention: NPM packages compromised, 271 antv, echarts-for-react, size-sensor, timeago | news.ycombinator.com | 2026-05-19
-
SaaSHub
SaaSHub - Software Alternatives and Reviews. SaaSHub helps you find the best software and product alternatives
-
Project mention: Show HN: WASM with JIT from a Swift SPM Package | news.ycombinator.com | 2026-06-04
Hello HN,
For my own needs I needed a powerful WASM engine that provides JIT acceleration, and use it from the convenience of the Swift Package Manager.
So I ended up wrapping wasmtime (a Rust project) https://github.com/bytecodealliance/wasmtime/
The SPM package does support most platforms swift supports, including mobile where JIT is simply not available.
I'd be happy to hear from you if this is something you may be interested in using and what are your WASM use cases.
Thanks :+1:
-
-
agent-os
A portable open-source operating system for agents. ~6 ms coldstarts, 32x cheaper than sandboxes. Powered by WebAssembly and V8 isolates. (by rivet-dev)
Project mention: AgentOS: A portable open-source operating system for agents | news.ycombinator.com | 2026-05-05 -
moltis
A secure persistent personal agent server in Rust. One binary, sandboxed execution, multi-provider LLMs, voice, memory, Telegram, WhatsApp, Discord, Teams, and MCP tools. Secure by design, runs on your hardware.
Project mention: OpenClaw Is a Security Nightmare Dressed Up as a Daydream | news.ycombinator.com | 2026-03-22I'm on my 3rd "claw" variant (currently https://github.com/moltis-org/moltis). I had the same issues you had. Moltis is better (at the moment).
-
nono
Capability-based agent runtime with fine-grained policies . Brokering access directly within the agent's operating context, with zero setup and zero latency
Try an external sandboxing tool. When you need to adjust the sandbox, close the agent, launch it with the new params, and resume the session. It doesn't take long to arrive at a stable configuration; for me it's mostly about rw access to the CWD, read access to other local repos, and access to Nix. Other than that I can just use YOLO modes and not sweat it.
I briefly evaluated a bunch (had an LLM make a list of those that satisfied some basic criteria, then visited READMEs and websites) and chose nono. No regrets: https://nono.sh/
-
Project mention: Show HN: Smol machines – subsecond coldstart, portable virtual machines | news.ycombinator.com | 2026-04-17
Could it be made even faster using some of the ideas from https://github.com/zerobootdev/zeroboot ?
-
Wasmi, the chosen runtime, has also been audited twice previously for blockchain use cases. Those audit reports are available publicly here: https://github.com/wasmi-labs/wasmi/tree/main/resources
-
kuasar
A multi-sandbox container runtime that provides cloud-native, all-scenario multiple sandbox container solutions.
-
-
Project mention: Show HN: VibeBox – an ultrafast macOS sandbox for AI agents | news.ycombinator.com | 2026-02-08
-
-
I'm KV, an upcoming grad, previously built rl envs + infra at verita-ai.com, hud.ai (YC W25), mecha.so and fileago.com
And built some projects like: sandbox for agents with firecracker and rust [ https://github.com/vrn21/bouvet ] ; a key value store in rust[ https://github.com/hrefto/shorterdb ]; a serverless FaaS platform with WASM and rust [ https://github.com/orbit-serverless/server ]; a postgres extension with pgrx for full text search using tantivy, bm25, rust [ https://github.com/vrn21/pdb ]
-
hakoniwa
Process isolation for Linux using namespaces, resource limits, cgroups, landlock and seccomp.
-
trusted-remote-execution
Sandboxed Rhai script execution engine with Cedar policy authorization for every system operation.
Project mention: Rex is a secure script execution engine that uses Cedar policies | news.ycombinator.com | 2026-05-09 -
-
Project mention: Python interpreter written in Rust for use by AI | news.ycombinator.com | 2026-02-06
This is a really interesting take on the sandboxing problem. This reminds me of an experiment I worked on a while back (https://github.com/imfing/jsrun), which embedded V8 into Python to allow running JavaScript with tightly controlled access to the host environment. Similar in goal to run untrusted code in Python.
I’m especially curious about where the Pydantic team wants to take Monty. The minimal-interpreter approach feels like a good starting point for AI workloads, but the long tail of Python semantics is brutal. There is a trade-off between keeping the surface area small (for security and predictability) and providing sufficient language capabilities to handle non-trivial snippets that LLMs generate to do complex tasks
-
Symbiont
Rust-native runtime for executing AI agents and tools under explicit policy, identity, and audit controls.
Project mention: Symbiont – Typestate-enforced policy gates for AI agents (Rust) | news.ycombinator.com | 2026-04-22 -
Project mention: Show HN: Railguard – A safer –dangerously-skip-permissions for Claude Code | news.ycombinator.com | 2026-03-17
-
Project mention: Show HN: A sandboxed execution environment for AI agents via WASM | news.ycombinator.com | 2026-02-08
-
sandbox-shell
macOS Seatbelt sandbox CLI for developers. Protect credentials (SSH, AWS, GPG) from malicious npm packages, supply chain attacks, and untrusted build scripts. Deny-by-default filesystem isolation. Perfect for Claude Code agentic workflows with --dangerously-skip-permissions.
Project mention: Show HN: Sx – macOS sandbox CLI for credential protection | news.ycombinator.com | 2026-02-04 -
Project mention: Show HN: Nix-sandbox-MCP: Reproducible, isolated code execution for Claude/LLMs | news.ycombinator.com | 2026-02-09
-
firehazard
Unopinionated low level API bindings focused on soundness, safety, and stronger types over raw FFI.
NOTE:
The open source projects on this list are ordered by number of github stars.
The number of mentions indicates repo mentiontions in the last 12 Months or
since we started tracking (Dec 2020).
Rust Sandbox discussion
Rust Sandbox related posts
-
Show HN: WASM with JIT from a Swift SPM Package
-
Show HN: Desktop GUI sandbox for AI agents and MCP servers
-
MCP servers, sandboxed — introducing ACT
-
How to run CubeSandbox on a cloud server?
-
How I cut my OpenAI Agent latency by replacing cloud sandboxes with a local microVM
-
Buy a mac mini to Run OpenClaw? Anyone Can Get a Safer Sandbox in 1 Minute
-
CubeSandbox: Instant, Concurrent, Secure and Lightweight Sandbox for AI Agents
-
A note from our sponsor - SaaSHub
www.saashub.com | 5 Jun 2026
Index
What are some of the best open-source Sandbox projects in Rust? This list will help you:
| # | Project | Stars |
|---|---|---|
| 1 | firecracker | 34,735 |
| 2 | wasmtime | 18,102 |
| 3 | microsandbox | 6,426 |
| 4 | agent-os | 2,779 |
| 5 | moltis | 2,714 |
| 6 | nono | 2,566 |
| 7 | zeroboot | 2,356 |
| 8 | wasmi | 2,122 |
| 9 | kuasar | 1,425 |
| 10 | birdcage | 214 |
| 11 | vibebox | 204 |
| 12 | LRVM | 102 |
| 13 | bouvet | 101 |
| 14 | hakoniwa | 75 |
| 15 | trusted-remote-execution | 62 |
| 16 | CubeSandbox | 54 |
| 17 | jsrun | 52 |
| 18 | Symbiont | 45 |
| 19 | railguard | 40 |
| 20 | agent-sandbox | 28 |
| 21 | sandbox-shell | 23 |
| 22 | nix-sandbox-mcp | 16 |
| 23 | firehazard | 11 |
Sponsored
SaaSHub - Software Alternatives and Reviews
SaaSHub helps you find the best software and product alternatives
www.saashub.com