Vmette
Forensics & Incident ResponseA hardware‑isolated Linux VM sandbox for running untrusted code on macOS, keeping secrets and network off the host until explicitly allowed.
Features
- Creates a real hardware‑virtualized Linux guest that boots in ~1 second
- Default‑deny networking and filesystem – nothing reaches the host unless granted
- Ephemeral VMs: each run is fresh, leaving no persistence after shutdown
- Provides Model Context Protocol (MCP) tools so any MCP‑aware agent can execute code inside the sandbox with one line of config
Recent releases
View all 12 releases →Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Install & Platforms
Install via
shell-script
Platforms
macos
Similar tools
Alternative to
E2B
Vercel
Modal
Docker