greywall
A container-free, deny-by-default sandbox for AI coding agents, enforcing kernel-level filesystem, network, and syscall isolation on Linux and macOS.
What is greywall?
Greywall is a security sandbox for AI coding agents that provides container-free, kernel-enforced isolation for Linux and macOS systems. It operates on a deny-by-default principle, restricting filesystem access, network connections, and system calls to only what is explicitly permitted, preventing AI tools from accessing sensitive data like SSH keys or environment secrets. The tool includes a learning mode to trace command behavior and auto-generate least-privilege profiles.
Developers and security engineers who use AI coding assistants (e.g., Claude Code, Cursor, Codex) and need to run them in a secure, isolated environment without the overhead of containers.
Greywall offers a lightweight, kernel-level sandboxing solution that doesn't require containers, reducing complexity and overhead. Its deny-by-default approach, built-in profiles for popular AI agents, and learning mode for automatic profile generation provide a unique combination of strong security and developer convenience.
Overview
Container-free, deny-by-default sandbox for AI coding agents. Kernel-enforced filesystem, network, and syscall isolation for Linux and macOS
Use Cases
Best For
Related Projects
Found a gem we're missing?
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.
