Sigstorenono sandboxes any terminal agent. Pull a signed profile from the registry and run — no wrappers, no rewrites.
It scales from a single laptop to fleets of agents without changing the model — the same composable policy, per-tool sandboxing, credential protection, and fully auditable execution.
Scalable JSON profiles that compose across teams and version-control alongside your code.
A sandbox tuned to each agent and tool — least privilege by default, not one blunt boundary.
Secrets are injected at the boundary and never exposed to the agent. Zeroised on exit.
Every action lands in a cryptographic, tamper-evident audit trail you can verify.
“Datadog engineers want their agents to move fast, and we want our credentials and production systems kept safe while they do. nono is the only sandbox that gives us both fine-grained, per-command policies and sophisticated credential management that fits existing, complex real-world toolchains.”
James Carnegie -- Staff Security Engineer, Datadog
“Security is embedded in everything we build at Okta. nono gives us the confidence to innovate with AI agents by isolating their execution in a highly secure, policy-controlled sandbox. It ensures our credentials remain locked down and protected, without sacrificing developer velocity”
Leonardo Zanivan -- Principal Engineer, Okta
“Neat project, thanks for sharing! I like the OS-specific security primitives, useful built-in profiles, and being able to customize what's allowed/blocked.”
Clint Gibler -- Member of Technical Staff, OpenAI
“OS-Level Isolation for AI Agents. Really awesome work and resource here”
Chris Hughes -- VP, Security Strategy @ Zenity
“I integrated nono into my project this weekend and it was a breeze to work with!”
Terra Tauri -- Senior Engineer II, Bit Complete
“Beautiful work! It is encouraging to see kernel security being taken seriously, especially during this current episode of OpenClaw and Moltbot. ”
Cuong Nguyen -- Cloud Architect and System Engineer