coi
A security-hardened container runtime for AI coding agents using Incus system containers with real-time threat detection and credential isolation.
What is coi?
Code on Incus is a security-hardened container runtime that allows developers to run AI coding assistants like Claude Code and opencode in isolated Incus system containers. It solves the security risks of running AI tools directly on a host by providing credential isolation, real-time threat detection, and network security while maintaining full functionality for the AI agents.
Developers and security-conscious teams who use AI coding assistants and need to protect their host systems from potential threats like credential exposure, reverse shells, and data exfiltration.
Developers choose Code on Incus because it offers superior security compared to Docker or bare-metal execution, with built-in real-time threat detection, automated response mechanisms, and true credential isolation—all while providing a seamless experience for AI-assisted coding.
Overview
Give each AI agent its own isolated machine with root, Docker, and systemd. Active defense detects and stops threats automatically.
Use Cases
Best For
- Running AI coding assistants in isolated environments with full security controls
Related Projects
Found a gem we're missing?
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.
