Greywall

Open sourceSelf-hostable

Deny-by-default sandbox that isolates the filesystem and network access of commands, CLI tools and AI coding agents on Linux and macOS.

Visit website ↗View on GitHub

CategorySecurity

PricingFree, open source

Self-hostableYes

RepositoryGreyhavenHQ/greywall

LicenseApache-2.0

LanguageGo

Last activityOct 2026Active

Repository

From GitHub · updated Oct 20

Stars310

Forks38

Open issues28

Last pushOct 2026

Related reading

Book · FreeBuilding Secure & Reliable Systems ↗Heather Adkins, Betsy Beyer, Paul Blankinship et al. · O'Reilly · 2020 Conference · FreeAll Day DevOps ↗Online Conference · PaidDevOpsConnect ↗

Alternatives to Greywall

Open source alternatives

BunkerWeb★ 11k

Open-source web application firewall built on NGINX, for Docker, Kubernetes and Linux.

checkov★ 9.1k

Prevent cloud misconfigurations and find vulnerabilities during build-time in infrastructure as code, container images and open source packages.

Darkmoon★ 1.1k

Open source autonomous AI penetration testing platform that orchestrates 80+ offensive tools via Markdown playbooks with a proof trail per finding.

Hosted & commercial alternatives

Self-hosted control plane that applies policy checks, approval gates and audit trails to actions taken by AI agents.

Free DNS and email security scanner. Checks SPF, DKIM, DMARC, DNSSEC with API for CI/CD integration.