Capsem – a Rust hypervisor sandboxing AI agents in air-gapped Linux VMs
Capsem is a new Rust-based hypervisor designed to sandbox AI coding agents within isolated, air-gapped Linux virtual machines. It provides security features like read-only filesystems and MITM proxy inspection to ensure safe execution of AI tools.
Why it matters
As AI agents gain more autonomy and access to local environments, robust sandboxing is critical to prevent malicious code execution and data exfiltration.
A Rust-powered hypervisor that sandboxes every AI coding agent in its own air-gapped Linux VM. See everything, control everything.
Learn More Ready to code, out of the box A fully configured Linux dev environment with your favorite AI agents, MCP tools, and packages pre-installed. Boot to prompt in under 10 seconds.
All major AI coding agents, pre-installed and auto-configured for sandbox mode.
Policy-checked tool access over vsock. Built-in tools plus custom MCP servers via fastmcp.
Python, Node.js, and 30+ packages ready to go. No setup required.
Get smarter about the news
Sign up free for a feed built around what you actually care about, Dive Deeper research on any story, and the full text of every article.
Create free accountAlready have an account? Sign in