Zerobox – Sandbox any command with file, network, credential controls
I'm excited to introduce Zerobox, a cross-platform, single binary process sandboxing CLI written in Rust. It uses the sandboxing crates from the OpenAI Codex repo and adds additional functionalities like secret injection, SDK, etc. Watch the demo: https://www.youtube.com/watch?v=wZiPm9BOPCg Zerobox follows the same sandboxing policy as Deno which is deny by default. The only operation that the command can run is reading files, all writes and network I/O are blocked by default. No VMs, no Docker, no remote servers. Want to block reads to /etc? zerobox…
Zerobox – Sandbox any command with file, network, credential controls launched on March 30, 2026 with 141 votes, #261 of 23,380 launches that month and more than 95% of that year's launches.
In plain words
Zerobox is a cross-platform sandboxing CLI tool written in Rust that isolates and restricts what commands can do. It runs any program with controlled access to files, network, and credentials using native OS sandboxing mechanisms, blocking operations by default and allowing only explicitly permitted ones. For developers needing to safely execute untrusted or third-party commands, it offers fine-grained permission controls without requiring virtual machines or containers.
written from the facts on this page · September 2026
From the sources
Zerobox is a lightweight, cross-platform process sandboxing powered by OpenAI Codex's sandbox runtime. Single binary, no Docker, no VMs with ~10ms overhead. Zerobox offers deny by default security policy, credential injection, file access control and network filtering which lets you allow or deny outbound traffic by domain. Zerobox also offers SDKs for Rust, TypeScript, and Python with a consistent API across languages.
Lightweight, cross-platform process sandboxing powered by OpenAI Codex's runtime. Sandbox any command with file, network, and credential controls. - afshinm/zerobox
In the maker’s words, at launch
I'm excited to introduce Zerobox, a cross-platform, single binary process sandboxing CLI written in Rust. It uses the sandboxing crates from the OpenAI Codex repo and adds additional functionalities like secret injection, SDK, etc. Watch the demo: https://www.youtube.com/watch?v=wZiPm9BOPCg Zerobox…
Does a similar job
all alternatives →
Tiny VM sandbox in C with apps in Rust, C and ZigDec 2025 · github.com · ▲196Minimalist, dependency-free virtual machine sandbox for microcontrollers and other resource-constrained devices. Single C file, no dynamic memory allocations, asynchronous design, pure C99 - ringtailsoftware/uvm32
Warp, a Rust-based terminal2022 · warp.dev · ▲946Hi HN community, I’m Zach, founder and CEO of Warp, and am excited to show you Warp, a fast Rust-based terminal that’s easy to use and built for teams. As of today, Warp is in public beta and any Mac user can download it. It works with bash, zsh, and fish. The terminal’s teletype-like interface has made it hard for the CLI to thrive. After 20 years of programming, I still find it hard to copy a command’s output; I always forget how to use `tar`; and I always have to relearn how to move my cursor. To fix fundamental accessibility issues, I believe we need to start innovating on the terminal,…
Sub-millisecond VM sandboxes using CoW memory forkingMar 2026 · github.com · ▲311I wanted to see how fast an isolated code sandbox could start if I never had to boot a fresh VM. So instead of launching a new microVM per execution, I boot Firecracker once with Python and numpy already loaded, then snapshot the full VM state. Every execution after that creates a new KVM VM backed by a `MAP_PRIVATE` mapping of the snapshot memory, so Linux gives me copy-on-write pages automatically. That means each sandbox starts from an already-running Python process inside a real VM, runs the code, and exits. These are real KVM VMs, not containers: separate guest kernel, separate guest…
Devbox – Easy, predictable shells and containers2022 · github.com · ▲515Devbox is a command-line tool that lets you easily create isolated shells and containers. You start by defining the list of packages required by your development environment, and devbox uses that definition to create an isolated environment just for your application. In practice, Devbox works similar to a package manager like yarn – except the packages it manages are at the operating-system level (the sort of thing you would normally install with brew or apt-get). See it in action: https://youtu.be/WMBaXQZmDoA
Sandy – A tiny Sandbox to run untrusted code ️2020 · github.com · ▲64A tiny "sandbox" to run untrusted code 🏖️. Contribute to craigmulligan/sandy development by creating an account on GitHub.
RustyBox – a Busybox fork written in Rust2019 · github.com · ▲114A free-range, non-GMO fork of busybox in 100% Rust 🦀 - samuela/rustybox
More ai this month
the category →
Paintings by AI models: programs run through a simulation of oil paint.
AI · 21d ago · stillwet.art
PixVerse R2▲381A real-time world model you can explore and change
AI · 30d ago · world.pixverse.video
Source: Show HN post ↗ · launch text quoted in part
Launched alongside, March 2026
the whole month →
Switch from ChatGPT to Claude with import memory feature
AI · Mar 2026 · claude.com
Littlebird▲709Littlebird remembers everything across your meetings, messages, docs, and apps, then takes action so you can recall any detail and never lose context.
AI · Mar 2026 · littlebird.ai
