Products

The cage

An agent can run inside a sandbox that limits what it can touch even if its reasoning goes wrong. Vaara works with twelve of them through one interface, and every receipt says which sandbox the decision was made in and whether the operating system confirmed it.

The sandbox is your choice, and the receipt says which one it was.

Vaara + NVIDIA OpenShell

OpenShell decides what an agent may reach. Vaara adds the decision for each action and the receipt anyone can check.

And eleven more

The OpenAI Codex sandbox, Anthropic's sandbox runtime, gVisor, Kata Containers, Firecracker, the Kubernetes agent sandbox, microsandbox, E2B, Apple's container tool, nono, and Vaara's own Linux cage.

Locked network

Optionally, an agent can only reach the hosts you list, and every connection is a decision on the record.

Honest about strength

A virtual machine, a container and an application sandbox are different strengths of wall. The receipt names which kind it was.