nono

6.3easy start · #15 of 22
in Sandbox Software

Free to practise onnot on record
Free trialnot on record
Well documentedyes
Runs where you workyes

Runs on Linux, Mac, Windows.

Visit site Alternatives

nono is ranked #15 of 22 in sandbox software on The Geeks Club. It runs on Linux, macOS, Windows.

Compared on sandbox software

Network controls: Yes
API or CLI access: Yes
Deployment: self_hosted

Best nono alternatives

See all 12

ANY.RUN 0 of 4 in the starter kit Lesson 17.9 Daytona 0 of 4 in the starter kit Lesson 27.8 Vercel 0 of 4 in the starter kit Lesson 37.4 Northflank 0 of 4 in the starter kit Lesson 47.3 Docker Desktop 0 of 4 in the starter kit Lesson 57.2 microsandbox 0 of 4 in the starter kit Lesson 67.2

The record

Product: nono describes itself as agent runtime security with kernel-enforced boundaries for AI agents.
Execution isolation: It creates ephemeral, invocation-scoped micro sandboxes for tool calls, with scoped files, network routes, arguments, and credentials.
Kernel enforcement: The OS sandbox uses Landlock on Linux and Windows/WSL2 and Seatbelt on macOS; the page says no root is required.
Agent compatibility: The site lists Claude Code, OpenCode, Codex, Antigravity, Goose, OpenClaw, GitHub Copilot, Qwen Code, Pi, and Hermes.
Policy profiles: JSON profiles define agent access and can be version-controlled alongside code.
Rollback: SHA-256 content-addressed snapshots record filesystem state before and after sessions, and the page describes restoring a session atomically.
Audit: The audit trail records operations in a Merkle tree and commits a SHA-256 root at session end for integrity verification.
Credential handling: The site says credentials are injected at the boundary and never exposed to the agent.
Network control: The homepage describes proxy-mediated network access where policy can allow or deny requests and route out-of-policy actions for human approval.
Developer interfaces: The documentation lists a CLI, a Rust core library, and Go, TypeScript, and Python SDKs.
Installation: The homepage offers a shell installer, Homebrew, and links to Debian, Fedora, Arch, and Nix installation instructions.
Windows caveat: On WSL2, the page reports 84% feature parity and says capability elevation and per-port network rules have limitations.
Support: The documentation links to Discord for community support.

Where it ranks on The Geeks Club

Best Sandbox Software in 2026#15 of 22

Is nono yours?

Claim it for free: prove the domain, then correct facts, plans and screenshots. An editor reviews every change.

Claim it free Promote nono

Sources

nono.sh· checked 4 Oct 2026
nono.sh/os-sandbox· checked 4 Oct 2026
nono.sh/undo· checked 4 Oct 2026
nono.sh/audit-trail· checked 4 Oct 2026
nono.sh/docs/introduction· checked 4 Oct 2026