nono

nono

Always Further
+
+

Related Products

  • BAND
    3 Ratings
    Visit Website
  • Google Cloud Platform
    61,066 Ratings
    Visit Website
  • JS7 JobScheduler
    1 Rating
    Visit Website
  • Servers.com by Nexcess
    15 Ratings
    Visit Website
  • Apify
    1,800 Ratings
    Visit Website
  • Veeam Data Platform
    1,267 Ratings
    Visit Website
  • Gemini Enterprise Agent Platform
    1,161 Ratings
    Visit Website
  • Gearset
    305 Ratings
    Visit Website
  • Creatio
    589 Ratings
    Visit Website
  • cside
    37 Ratings
    Visit Website

About

Agent Substrate is an open-source runtime for operating isolated, stateful agent and code-execution sandboxes on Kubernetes. It coordinates actor and worker lifecycles, places active workloads on a shared pool of ready capacity, and can suspend idle environments while preserving memory and filesystem state for later resumption. Sandboxes use gVisor or Cloud Hypervisor microVM isolation, with per-actor identity and network controls. Agent Substrate is designed for platform and infrastructure teams building agent-hosting services, coding environments, and other workloads that execute untrusted or intermittent tasks. The core project is Kubernetes-portable; Google Cloud also provides GKE-optimized deployment tooling. Optional Filestore agent volumes can persist workspaces across suspend and resume cycles.

About

nono is an open source, kernel-enforced sandbox for AI coding agents and LLM workloads. Unlike policy-based guardrails that intercept and filter operations, nono uses OS security primitives — Landlock on Linux and Seatbelt on macOS — to make unauthorised operations structurally impossible at the syscall level. Wrap any AI agent — Claude Code, OpenCode, OpenClaw, or any CLI process — with a single command. nono applies default-deny filesystem access, blocks destructive commands (rm, dd, chmod, sudo), isolates credentials and API keys, and cascades all restrictions to child processes. No escape mechanism exists once restrictions are applied. Built-in profiles get you running in seconds. Secrets inject securely from the system keystore and are zeroised on exit. Audit logging, atomic rollbacks, and Sigstore-attested policy signing are on the roadmap. Apache 2.0. From the creator of Sigstore.

Platforms Supported

Windows Not Supported
Mac Not Supported
Linux Supported
Cloud Not Supported
On-Premises Supported
iPhone Not Supported
iPad Not Supported
Android Not Supported
Chromebook Not Supported

Platforms Supported

Windows Not Supported
Mac Supported
Linux Supported
Cloud Not Supported
On-Premises Not Supported
iPhone Not Supported
iPad Not Supported
Android Not Supported
Chromebook Not Supported

Audience

Platform and infrastructure teams building services that run isolated agent or code-execution workloads on Kubernetes.

Audience

Developers & AI power users — Anyone running Claude Code, Cursor, OpenCode, or other CLI-based AI coding agents on their local machine who wants to prevent agents from accessing credentials, deleting files, or touching paths outside the project directory. CISO, Security engineers & DevSecOps teams — Teams responsible for establishing safe agent usage policies across engineering organisations. nono provides kernel-enforced, auditable enforcement without requiring infrastructure changes. Platform & ML engineers — Engineering teams building or evaluating agentic AI workflows who need runtime isolation as part of their agent stack. Software companies adopting AI tooling — Organisations in software development, fintech, healthcare, and any regulated industry where developer workstations hold sensitive credentials, proprietary code, or compliance-relevant data that must not be accessible to autonomous agents. Open source contributors & researchers — Security researchers and OSS contributors working with or studying AI agent threat models, kernel sandboxing, and runtime security primitives.

Support

Phone Support Not Supported
24/7 Live Support Not Supported
Online Not Supported

Support

Phone Support Not Supported
24/7 Live Support Not Supported
Online Not Supported

API

Offers API Supported

API

Offers API Not Supported

Screenshots and Videos

Screenshots and Videos

No images available

Pricing

$0
Agent Substrate on GKE is offered at no extra charge. GKE pricing applies to the resources you create.
Free Version Supported
Free Trial Not Supported

Pricing

No information available.
Free Version Supported
Free Trial Not Supported

Reviews/Ratings

Overall 0.0 / 5
ease 0.0 / 5
features 0.0 / 5
design 0.0 / 5
support 0.0 / 5

This software hasn't been reviewed yet. Be the first to provide a review:

Review this Software

Reviews/Ratings

Overall 0.0 / 5
ease 0.0 / 5
features 0.0 / 5
design 0.0 / 5
support 0.0 / 5

This software hasn't been reviewed yet. Be the first to provide a review:

Review this Software

Training

Documentation Supported
Webinars Not Supported
Live Online Not Supported
In Person Not Supported

Training

Documentation Supported
Webinars Not Supported
Live Online Not Supported
In Person Not Supported

Company Information

Google
Founded: 1998
United States
github.com/agent-substrate/substrate

Company Information

Always Further
Founded: 2025
United Kingdom
alwaysfurther.ai/

Alternatives

Alternatives

Sprites

Sprites

Fly.io
Spawn

Spawn

OpenRouter

Categories

Categories

AI Security Supported

Integrations

Claude Code Not Supported
Google Cloud Filestore Supported
Google Cloud Platform Supported
Model Context Protocol (MCP) Supported
OpenAI Codex Not Supported
OpenClaw Not Supported
OpenCode Not Supported

Integrations

Claude Code Supported
Google Cloud Filestore Not Supported
Google Cloud Platform Not Supported
Model Context Protocol (MCP) Not Supported
OpenAI Codex Supported
OpenClaw Supported
OpenCode Supported
Claim Agent Substrate and update features and information
Claim Agent Substrate and update features and information
Claim nono and update features and information
Claim nono and update features and information