Open source
Pent
An AI agent, a build tool, a dependency you didn't write — anything you run can also reach your SSH keys, your local files, your whole network. Pent wraps any process in a lightweight sandbox that restricts exactly which paths it can touch and which domains it can reach. No containers. No VMs. No root access.
AI coding agents
Scope Claude, Cursor, or any LLM tool to only the domains and paths it actually needs.
Build pipelines
Stop npm, cargo, or pip from reading your credentials or hitting unknown domains mid-install.
Third-party tools
Contain analytics SDKs, telemetry binaries, or vendor software you ship but didn't write.