gVisor
Named by 9 kept items in this workspace.
6 items name it under tools, 2 under classification.technologies and 1 under affected products.
The items that name it 9
microVM-style sandbox closing the kernel gap left by containers, at a cost of startup time/memory
Intercepts syscalls in a userspace kernel so the host kernel sees a smaller attack surface, used for running untrusted workloads at container density.
open-source project scanned by Atlas; previously unknown vulnerabilities found
Sandbox used by defending-code-harness for isolated container execution with egress allowlist
User-space kernel sandbox used to contain kernel-exploit "detonation" when scanning untrusted repos
Sandboxing technology used in the Kubernetes deployment path to safely scan untrusted code
sandboxing technology providing isolation with egress restricted to the Claude API for autonomous agent containers
In every workspace you can read 14
AI
Security
All technologies in this workspace.