Dev tools · alternatives · 2026
24 alternatives to BVisor – An Embedded Bash Sandbox, 2ms Boot, Written in Zig
bVisor is an SDK and runtime for safely executing bash commands directly on your host machine. We built it on the belief that "sandbox" doesn't need to mean shipping off to remote sandbox products, or spinning up local VMs / containers. Sometimes, you just want to run that bash command locally. bVisor boots a sandbox from user-space without special permissions, powered by seccomp user notifier. This allows us to intercept syscalls from guest processes and selectively virtualize them to block privilege escalation, isolate process visibility, and keep filesystem changes isolated per…
BVisor is an SDK and runtime that executes bash commands in lightweight sandboxes on the host machine without requiring remote services, VMs, or containers. Built with Zig and powered by seccomp syscall interception… Below are 24 products that do a similar job, ranked by how close each is in meaning and then by launch-day votes.
- 1
Drop: a rootless Linux sandbox for developers. It isolates coding agents and third-party packages while preserving your work environment.
29d ago · droprun.sh · its alternatives →
- 2
I wanted to see how fast an isolated code sandbox could start if I never had to boot a fresh VM. So instead of launching a new microVM per execution, I boot Firecracker once with Python and numpy already loaded, then snapshot the full VM state. Every execution after that creates a new KVM VM backed by a `MAP_PRIVATE` mapping of the snapshot memory, so Linux gives me copy-on-write pages automatically. That means each sandbox starts from an already-running Python process inside a real VM, runs the code, and exits. These are real KVM VMs, not containers: separate guest kernel, separate guest…
Mar 2026 · github.com · its alternatives →
- 3
speeds up your bashrc by running (slow) setup commands on the fly - benvan/sandboxd
2016 · github.com · its alternatives →
- 4
Minimalist, dependency-free virtual machine sandbox for microcontrollers and other resource-constrained devices. Single C file, no dynamic memory allocations, asynchronous design, pure C99 - ringtailsoftware/uvm32
Dec 2025 · github.com · its alternatives →
- 5
Hi HN community, I’m Zach, founder and CEO of Warp, and am excited to show you Warp, a fast Rust-based terminal that’s easy to use and built for teams. As of today, Warp is in public beta and any Mac user can download it. It works with bash, zsh, and fish. The terminal’s teletype-like interface has made it hard for the CLI to thrive. After 20 years of programming, I still find it hard to copy a command’s output; I always forget how to use `tar`; and I always have to relearn how to move my cursor. To fix fundamental accessibility issues, I believe we need to start innovating on the terminal,…
2022 · warp.dev · its alternatives →
- 6
:racehorse: Extremely minimal vmm for linux written in C. Hopefully someday will spin linux-vm for you. - flouthoc/wiser
2021 · github.com · its alternatives →
- 7
I'm excited to introduce Zerobox, a cross-platform, single binary process sandboxing CLI written in Rust. It uses the sandboxing crates from the OpenAI Codex repo and adds additional functionalities like secret injection, SDK, etc. Watch the demo: https://www.youtube.com/watch?v=wZiPm9BOPCg Zerobox follows the same sandboxing policy as Deno which is deny by default. The only operation that the command can run is reading files, all writes and network I/O are blocked by default. No VMs, no Docker, no remote servers. Want to block reads to /etc? zerobox…
Mar 2026 · github.com · its alternatives →
- 8
Hi HN! I've been working on Bor, an open-source system for centralized Linux desktop management. Bor consists of a lightweight Go agent and a central server. Policies are streamed to clients over mTLS/gRPC in real time—no polling—and currently support Firefox, Chrome, KDE, dconf, polkit and package management, with more coming. Version 0.8 introduces several new policy types - Thunderbird, Microsoft Edge for Business and FirewallD zones, along with a number of improvements and fixes. I'd love feedback on the architecture, policy model, and whether this is something you'd consider for…
Aug 2026 · getbor.dev · its alternatives →
- 9
Superset▲541Hey HN, we’re Avi, Kiet, and Satya. We’re building Superset, an open-source terminal made for managing a bunch of coding agents (Claude Code, Codex, etc) in parallel. - Superset makes it easy to spin up git worktrees and automatically setup your environment - Agents and terminal tabs are isolated to worktrees, preventing conflicts - Built-in hooks [0] to notify when your coding agents are done/needs attention, - A diff viewer to review the changes and make PRs quickly We’re three engineers who’ve built and maintained large codebases, and kept wanting to work on as many features in…
Feb 2026 · superset.sh · its alternatives →
- 10
Hi HN, I spent the past year building this in my spare time because I got tired of enterprise security tools that cost $50K/year and don't understand Linux. TheProtector is a comprehensive security monitoring tool that actually runs on the systems we use (Linux) instead of being a Windows-first afterthought. Built it entirely on a $500 laptop because I believe good security shouldn't require unlimited budgets. Features: - Real-time process, network, and file monitoring - YARA malware detection with custom rules - eBPF kernel monitoring (when available) - Behavioral baseline…
2025 · github.com · its alternatives →
- 11
WASM sandbox for running LLM-generated code safely. Agents get a bash-like shell and can only call tools you provide, with constraints you define. No Docker, no subprocess, no SaaS — just pip install amla-sandbox
Jan 2026 · github.com · its alternatives →
- 12
A fast, rootless sandbox and virtual resource runtime for any workload, including untrusted and AI-generated code. Daemonless: a real, kernel-enforced container in ~3.5 ms from an OCI image, out of one static binary - getkern/kern
Aug 2026 · github.com · its alternatives →
- 13
Minimal distributed configuration management in bash - frameable/aviary.sh
2020 · github.com · its alternatives →
- 14
This is a project I made over the weekend. What if when you SSH'd into a machine, instead of giving you a user login, it would provision a new microVM just for you? It's like a little SimCity for VMs. This turned out to be a lot of fun, and I've wanted to make my own custom SSH server for a while now, with its fancy progress bars and color animations. The hardest part was definitely debugging VM setup, boot, and networking though! Compiling the Linux kernel with all the right configs was difficult. For a while I had issues with silent hangs on boot due to lack of available system entropy, on…
2025 · ekzhang.substack.com · its alternatives →
- 15
I've been working on CloudRouter, a skill + CLI that gives coding agents like Claude Code and Codex the ability to start cloud VMs and GPUs. When an agent writes code, it usually needs to start a dev server, run tests, open a browser to verify its work. Today that all happens on your local machine. This works fine for a single task, but the agent is sharing your computer: your ports, RAM, screen. If you run multiple agents in parallel, it gets a bit chaotic. Docker helps with isolation, but it still uses your machine's resources, and doesn't give the agent a browser, a desktop, or a GPU to…
Feb 2026 · cloudrouter.dev · its alternatives →
- 16
I initially built cs (codespelunker) as a way to answer the question, can BM25 relevance search work without building an index? Turns out it can, and so I iterated on the idea, building it into a full CLI tool. Recently I wanted to improve it by adding relevance of tools like Sourcegraph or Zoekt but again without adding an index. cs uses scc https://github.com/boyter/scc to understand the structure of the file on the fly. As such it can filter searches to code, comments or strings. It also applies a weighted BM25 algorithm where matches in actual code rank higher than…
2023 · github.com · its alternatives →
- 17
forkrun is the culmination of a 10-year-long journey focused on "how to make shell parallelization fast". What started as a standard "fork jobs in a loop" has turned into a lock-free, CAS-retry-loop-free, SIMD-accelerated, self-tuning, NUMA aware shell-based stream parallelization engine that is (mostly) a drop-in replacement for xargs -P and GNU parallel. On my 14-core/28-thread i9-7940x, forkrun achieves: * 200,000+ batch dispatches/sec (vs ~500 for GNU Parallel) * ~95–99% CPU utilization across all 28 logical cores, even when the workload is non-existant (bash no-ops / `:`)…
Mar 2026 · github.com · its alternatives →
- 18
Spin up secure sandboxes in ~100 ms
Nov 2025 · hopx.ai · its alternatives →
- 19
Hi HN, like many of you talented folk, I’ve been building more, faster than ever. I built Saggar after my terminal stopped feeling like a tool and started feeling like a tab-management problem. Let me know you think!
Aug 2026 · saggar.marginalutility.dev · its alternatives →
- 20
Hi HN! Sina here. i wanted to share this open source project (apache 2.0) that i've been working on for the past month or so. it's called hotcell and it lets you create/pause/manage sandboxes on any device (your laptop, linux vm, bare metal). i've tested it against various benchmarks that i found on computesdk (https://www.computesdk.com/benchmarks/sandboxes/) as well as the one shared by dax (cofounder of open code) on twitter recently (link to his original thread and my reply https://x.com/sinasanm/status/2078158598996443346) and…
Aug 2026 · github.com · its alternatives →
- 21
AnyFrame▲96Spawn sandboxes at the speed of natural language. Pause, resume, and snapshot the full state of an agent’s workspace — filesystem, processes, memory — and pick up later without losing context.
May 2026 · anyframe.dev · its alternatives →
- 22
SuperHQ▲95Hey HN, I built SuperHQ, an app that lets you run coding agents in local sandboxes (powered by Shuru). No custom UI wrapping the agents, they run as CLI/TUI like they were designed to. It just provides you the tools most of us (okay, maybe just me?) needed for running multiple coding agents in parallel without worrying about breaking your system or work environment. Each agent runs in its own microVM. You mount your projects in, writes go to a tmpfs overlay so your host is never touched, and you get a unified diff view to accept or discard changes. API keys never enter the sandbox, they…
Apr 2026 · superhq.ai · its alternatives →
- 23
Build and run tiny vms from Dockerfiles. Small and sleek. - GitHub - ottomatica/slim at 2.x
2022 · github.com · its alternatives →
- 24
Hi HN, we built SuperHQ, an open source app that runs AI coding agents in isolated microVM sandboxes instead of directly on your machine. Each agent gets its own VM with a full Debian environment. You mount your projects in, writes go to a tmpfs overlay so your host is never touched, and you get a diff view to accept or discard changes. API keys never enter the sandbox. We also just launched remote.superhq.ai which acts as a remote control for SuperHQ, allowing you to access your workspaces and agents from anywhere.
Apr 2026 · github.com · its alternatives →
Also compare
- Drop – a rootless Linux sandbox with gVisor support alternatives
- Sub-millisecond VM sandboxes using CoW memory forking alternatives
- Sandboxd – speed up your bash/zshrc by lazy-loading the slow bits alternatives
- Tiny VM sandbox in C with apps in Rust, C and Zig alternatives
- Warp, a Rust-based terminal alternatives
- Wiser – minimal hypervisor boots Linux VM, written in C alternatives
Ranked by how close each launch is in meaning, then by votes. Prices were read from each product’s own site when checked and can change. Refine with your own description →