The safeguards map / 3.1 Execution sandboxes

Kuasar

Cloud Native Computing Foundation (foundation). CNCF, sandbox. Apache-2.0. Mapped; as of .

Drafted with AI

Drafted with AI from the cited sources under the direction of UnGovr staff. UnGovr holds editorial responsibility for this page. How this site is made

A container runtime that supports microVM, app kernel and WebAssembly sandboxers behind one sandbox API, so several sandbox types can run on a single node.

Where it sits

3.1 Execution sandboxes (primary): Provides MicroVM, App Kernel and Wasm sandboxers behind a standard sandbox API, letting a node run containers in whichever isolation technique the workload needs.

Kuasar is an efficient container runtime that provides cloud-native, all-scenario container solutions by supporting multiple sandbox techniques.

captured

all of which have been proven to be secure isolation techniques in a multi-tenant environment

captured

Facts

Concern
security
Names the law
no
Subject
software
Used by
those who run it
Runs
at runtime
Policy comes from
vendor defaults
Can the agent bypass it
depends

Handoffs

None recorded. A mapped entry with no handoff is here for its foundation home.

Collector's note

The isolation comes from the sandboxer chosen; Kuasar itself documents no policy evaluation.

Every quote is verbatim from a stored capture of the page linked under it. Placement is our reading of the product's own documentation; no publisher has reviewed or endorsed it. Rows CC BY 4.0. Names, marks and logos belong to their owners; logos identify each product and are not part of the dataset.