Average Ratings 0 Ratings
Average Ratings 0 Ratings
Description
Agent Substrate serves as an open-source runtime that facilitates the operation of isolated, stateful agent and code-execution sandboxes within Kubernetes environments. It effectively manages the lifecycle of actors and workers, allocates active workloads to a common pool of available resources, and has the ability to pause idle sandboxes while maintaining their memory and filesystem states for potential future use. Utilizing gVisor or Cloud Hypervisor microVM for isolation, these sandboxes incorporate unique identity and networking controls for each actor. This platform is specifically tailored for infrastructure and platform teams who are developing services for hosting agents, creating coding environments, and handling other tasks that may involve untrusted or sporadic execution. The primary framework is designed to be portable across Kubernetes, with Google Cloud providing specialized deployment tools optimized for GKE. Additionally, users can implement optional Filestore agent volumes to ensure that workspaces remain intact and accessible through suspension and resumption cycles, enhancing the reliability of the development environment. This versatility makes Agent Substrate an essential tool for modern cloud-native applications.
Description
nono is a novel open-source sandbox that utilizes kernel enforcement to create a secure environment for AI coding agents and LLM tasks. In contrast to traditional policy-based guardrails that merely monitor and filter operations, nono leverages operating system security features—specifically Landlock on Linux and Seatbelt on macOS—to render unauthorized operations impossible at the syscall level.
With just a single command, you can encapsulate any AI agent, including Claude Code, OpenCode, OpenClaw, or any command-line interface process. The system automatically enforces a default-deny policy for filesystem access, restricts harmful commands (such as rm, dd, chmod, and sudo), isolates sensitive credentials and API keys, and extends all imposed restrictions to any child processes, ensuring there's no avenue for escape once limitations are set.
Built-in profiles allow for rapid deployment, and secrets can be injected from the system keystore in a secure manner, with automatic zeroization upon exit. Additionally, future enhancements such as audit logging, atomic rollbacks, and Sigstore-attested policy signing are planned, offering robust tracking and security features.
It operates under the Apache 2.0 license and is developed by the same creator behind Sigstore, further emphasizing its credibility and reliability in securing AI workloads.
API Access
Has API
Yes
API Access
Has API
No
Screenshots View All
No images available
Integrations
Claude Code
No
Google Cloud Filestore
Yes
Google Cloud Platform
Yes
Model Context Protocol (MCP)
Yes
OpenAI Codex
No
OpenClaw
No
OpenCode
No
Integrations
Claude Code
Yes
Google Cloud Filestore
No
Google Cloud Platform
No
Model Context Protocol (MCP)
No
OpenAI Codex
Yes
OpenClaw
Yes
OpenCode
Yes
Pricing Details
$0
Agent Substrate on GKE is offered at no extra charge. GKE pricing applies to the resources you create.
Free Trial
No
Free Version
Yes
Pricing Details
No price information available.
Free Trial
No
Free Version
Yes
Deployment
Web-Based
No
On-Premises
Yes
iPhone App
No
iPad App
No
Android App
No
Windows
No
Mac
No
Linux
Yes
Chromebook
No
Deployment
Web-Based
No
On-Premises
No
iPhone App
No
iPad App
No
Android App
No
Windows
No
Mac
Yes
Linux
Yes
Chromebook
No
Customer Support
Business Hours
No
Live Rep (24/7)
No
Online Support
No
Customer Support
Business Hours
No
Live Rep (24/7)
No
Online Support
No
Types of Training
Training Docs
Yes
Webinars
No
Live Training (Online)
No
In Person
No
Types of Training
Training Docs
Yes
Webinars
No
Live Training (Online)
No
In Person
No
Vendor Details
Company Name
Founded
1998
Country
United States
Website
github.com/agent-substrate/substrate
Vendor Details
Company Name
Always Further
Founded
2025
Country
United Kingdom
Website
alwaysfurther.ai/
Product Features
Product Features
Alternatives
No Alternatives