anthropics/sandbox-runtime
A lightweight sandboxing tool for enforcing filesystem and network restrictions on arbitrary processes at the OS level, without requiring a container.
Running commentary
Checking recent Hacker News mentions…
A star delta has been computed for 52,827 of 63,708 tracked repositories in this period, and only those can be ranked in it.
A repository missing here has not been measured far enough back yet. That does not mean it did not move.
Star counts measured between 09:42 and 00:50 (BKK).
A lightweight sandboxing tool for enforcing filesystem and network restrictions on arbitrary processes at the OS level, without requiring a container.
Network-wide ads & trackers blocking DNS server
Infisical is the open-source platform for securing secrets, certificates, access, and AI Agents.
runs anywhere. uses anything
Modern networking and security platform providing secure access and connectivity to apps, infrastructure, and AI workloads. Connect and protect your users.
A modern platform for visual, flexible, and extensible graph-based investigations. For cybersecurity analysts and investigators.
🕵️♂️ All-in-one OSINT tool for analysing any website
Free Windows, Mac and Linux cleaner, scanner, and more.
AI-safe .env files: Schemas for agents, Secrets for humans.
OWASP Juice Shop: Probably the most modern and sophisticated insecure web application
OpenAI's Codex Security CLI and TypeScript SDK for finding, validating, and fixing security vulnerabilities. npm: https://www.npmjs.com/package/@openai/codex-security
Bitwarden-compatible server running on Cloudflare Workers
Deepsec is a security harness for finding vulnerabilities in your codebase powered by coding agents
Open-source AI-powered offensive security harness for automated penetration testing.
Cross-platform desktop GUI app to clean image metadata
A self-hosted dashboard for CrowdSec: investigate alerts, manage decisions, monitor runtime metrics, and send notifications from one responsive UI.
Privacy-first password manager with built-in email aliasing. Fully encrypted and self-hostable.
End-to-end encrypted notes, tasks, files, passwords, journal and bookmarks. Keyed by a 12-word BIP-39 phrase: no email, no password, no account to leak. The full client source for web, desktop and mobile is published, along with the encryption (XChaCha20-Poly1305, HKDF-SHA256, Ed25519) and the threat model, so the privacy claims are falsifiable.
Open Cyber Threat Intelligence Platform
Open-source, self-hosted file-processing tool. Convert, compress, OCR, transcribe & run local AI across image, video, audio, PDF & documents, via UI, REST API & pipelines. Your files never leave your network.
The most advanced free and open-source browser fingerprinting library
Local-first AI canvas for visual workflows, AI short drama, image/video generation, storyboarding and asset management. ComfyUI, AI agents, MCP & Blender. 本地优先 AI 画布：AI短剧、AI资产管理、图像/视频生成、分镜制作与视频剪辑。
Share your Immich photos and albums in a safe way without exposing your Immich instance to the public.
Tuta is an email service with a strong focus on security and privacy that lets you encrypt emails, contacts and calendar entries on all your devices.
Pi extension package for Anthropic OAuth compatibility
Open-source Attack Surface Management. Discover assets. Identify exposure. Own your security data.
全能协议分析工具：浏览器抓包 + MITM 代理 + 指纹伪装 + AI 分析 + MCP Server 无缝对接 AI Agent/IDE | All-in-one protocol analysis toolkit — built-in browser capture, MITM proxy, JS hooks, fingerprint spoofing, AI analysis & MCP server for agent integration
AI Native platform to get companies compliant - Vanta & Drata Alternative
GDPR, WCAG 2.2 AA, and EAA compliant, self-hosted CAPTCHA alternative with PoW mechanism.
Open-source tool to build your Windows script from scratch. It includes debloat, privacy, performance & app installing scripts.
Showing 30 of 159 repositories
Running commentary
Linked from Hacker News and Reddit in the last 7 days, newest first. Our count, not GitHub’s.