Average Ratings 0 Ratings

Total
ease
features
design
support

No User Reviews. Be the first to provide a review:

Write a Review

Average Ratings 0 Ratings

Total
ease
features
design
support

No User Reviews. Be the first to provide a review:

Write a Review

Description

Agent Substrate serves as an open-source runtime that facilitates the operation of isolated, stateful agent and code-execution sandboxes within Kubernetes environments. It effectively manages the lifecycle of actors and workers, allocates active workloads to a common pool of available resources, and has the ability to pause idle sandboxes while maintaining their memory and filesystem states for potential future use. Utilizing gVisor or Cloud Hypervisor microVM for isolation, these sandboxes incorporate unique identity and networking controls for each actor. This platform is specifically tailored for infrastructure and platform teams who are developing services for hosting agents, creating coding environments, and handling other tasks that may involve untrusted or sporadic execution. The primary framework is designed to be portable across Kubernetes, with Google Cloud providing specialized deployment tools optimized for GKE. Additionally, users can implement optional Filestore agent volumes to ensure that workspaces remain intact and accessible through suspension and resumption cycles, enhancing the reliability of the development environment. This versatility makes Agent Substrate an essential tool for modern cloud-native applications.

Description

nono is a novel open-source sandbox that utilizes kernel enforcement to create a secure environment for AI coding agents and LLM tasks. In contrast to traditional policy-based guardrails that merely monitor and filter operations, nono leverages operating system security features—specifically Landlock on Linux and Seatbelt on macOS—to render unauthorized operations impossible at the syscall level. With just a single command, you can encapsulate any AI agent, including Claude Code, OpenCode, OpenClaw, or any command-line interface process. The system automatically enforces a default-deny policy for filesystem access, restricts harmful commands (such as rm, dd, chmod, and sudo), isolates sensitive credentials and API keys, and extends all imposed restrictions to any child processes, ensuring there's no avenue for escape once limitations are set. Built-in profiles allow for rapid deployment, and secrets can be injected from the system keystore in a secure manner, with automatic zeroization upon exit. Additionally, future enhancements such as audit logging, atomic rollbacks, and Sigstore-attested policy signing are planned, offering robust tracking and security features. It operates under the Apache 2.0 license and is developed by the same creator behind Sigstore, further emphasizing its credibility and reliability in securing AI workloads.

API Access

Has API Yes 

API Access

Has API No 

Screenshots View All

Screenshots View All

No images available

Integrations

Claude Code No 
Google Cloud Filestore Yes 
Google Cloud Platform Yes 
Model Context Protocol (MCP) Yes 
OpenAI Codex No 
OpenClaw No 
OpenCode No 

Integrations

Claude Code Yes 
Google Cloud Filestore No 
Google Cloud Platform No 
Model Context Protocol (MCP) No 
OpenAI Codex Yes 
OpenClaw Yes 
OpenCode Yes 

Pricing Details

$0
Agent Substrate on GKE is offered at no extra charge. GKE pricing applies to the resources you create.
Free Trial No 
Free Version Yes 

Pricing Details

No price information available.
Free Trial No 
Free Version Yes 

Deployment

Web-Based No 
On-Premises Yes 
iPhone App No 
iPad App No 
Android App No 
Windows No 
Mac No 
Linux Yes 
Chromebook No 

Deployment

Web-Based No 
On-Premises No 
iPhone App No 
iPad App No 
Android App No 
Windows No 
Mac Yes 
Linux Yes 
Chromebook No 

Customer Support

Business Hours No 
Live Rep (24/7) No 
Online Support No 

Customer Support

Business Hours No 
Live Rep (24/7) No 
Online Support No 

Types of Training

Training Docs Yes 
Webinars No 
Live Training (Online) No 
In Person No 

Types of Training

Training Docs Yes 
Webinars No 
Live Training (Online) No 
In Person No 

Vendor Details

Company Name

Google

Founded

1998

Country

United States

Website

github.com/agent-substrate/substrate

Vendor Details

Company Name

Always Further

Founded

2025

Country

United Kingdom

Website

alwaysfurther.ai/

Product Features

Alternatives

No Alternatives

Alternatives

Spawn Reviews

Spawn

OpenRouter