GreyhavenHQ / greywall

Container-free, deny-by-default sandbox for AI coding agents. Kernel-enforced filesystem, network, and syscall isolation for Linux and macOS

Why this job: topics: security, ai-security, sandbox

What it does

Deny-by-default filesystem. only the working directory is accessible unless you allow more
Network isolation. all traffic blocked or routed through greyproxy with a live dashboard
Command blocking. dangerous commands like rm -rf / and git push --force are denied
Built-in agent profiles. one-command setup for Claude Code, Cursor, Codex, Aider, Goose, Gemini, OpenCode, Amp, Cline, Copilot, and more
Learning mode. traces filesystem access and auto-generates least-privilege profiles

brew tap greyhavenhq/tap
brew install greywall

Repos similar to this one
Repo	Stars	Last commit	Licence	Downloads for
eugene1g / agent-safehouse	2,146	2 days ago	Apache-2.0	No downloads
Attention-Span-AI / Tego	16	4 days ago	Apache-2.0	Mac, Linux
strands-agents / box	512	yesterday	Apache-2.0	Mac, Linux

More: download files, languages, topics and project record