The safeguards map / 3.1 Execution sandboxes
Hyperlight
Drafted with AI
Drafted with AI from the cited sources under the direction of UnGovr staff. UnGovr holds editorial responsibility for this page. How this site is made
A lightweight virtual machine monitor, embedded as a library, that runs untrusted code in hypervisor-isolated micro VMs with no host filesystem or network access by default.
Where it sits
3.1 Execution sandboxes (primary): Runs untrusted guest code in hypervisor-isolated micro VMs that an application embeds as a library, with guests sandboxed by default.
Hyperlight lets you safely run untrusted code inside hypervisor-isolated micro VMs
captured
Guests are sandboxed by default with no access to the host filesystem, network, etc.
captured
Facts
- Concern
- security
- Names the law
- no
- Subject
- software
- Used by
- those who make itthose who run it
- Runs
- at runtime
- Policy comes from
- vendor defaults
- Can the agent bypass it
- depends
Handoffs
None recorded. A mapped entry with no handoff is here for its foundation home.
Collector's note
The README marks the project pre-1.0; maturity is the CNCF level.
Every quote is verbatim from a stored capture of the page linked under it. Placement is our reading of the product's own documentation; no publisher has reviewed or endorsed it. Rows CC BY 4.0. Names, marks and logos belong to their owners; logos identify each product and are not part of the dataset.