eBPF Python runtime sandbox with seccomp (Blocks RCE).
MIT License
Standalone, daemon-less, unprivileged Dockerfile and OCI compatible container image builder.
Application Kernel for Containers
Running C++ in anywhere like a script.
A lightweight process isolation tool that utilizes Linux namespaces, cgroups, rlimits and seccomp...
Layer for static code analysis and security hardening
Monitor Network Traffic Per Executable, Beautifully Visualized
eBPF based always-on profiler auto-discovering targets in Kubernetes and systemd, zero code chang...