OpenRod
Give each coding agent its own VM and its own network policy
Emerged finds new products worth a look, daily — what’s new today
SILO
Runs AI agents in locked-down Docker containers, with API keys kept on the host
If you let coding agents run on your laptop, this keeps your API keys and network out of their reach and logs every call they make.
SILO is a self-hosted command-line tool that starts agents inside hardened Docker containers: non-root, read-only, no Linux capabilities, and no direct internet route. All traffic passes a host-side proxy governed by YAML allow and deny rules. The proxy injects API keys at request time, and every model call, tool call and blocked request lands in one JSONL log. It is MIT-licensed and early: 13 commits and not yet on npm, so you build it from source. It runs on Linux, macOS and Windows with Docker.
More like this
Willder
Shared, permissioned memory for coding agents, with an audit row per read
AgentBox
One command to run parallel coding agents in sandboxes, local or cloud
Geiger
Inventory every AI agent on your machine and what it can reach
Grove
A Mac menu bar app that runs your dev servers for you and your AI agent alike
ContextVeil
Lets coding agents read files with secrets while redacting values from the LLM