Containerized Pentest Sandbox

Pentagi.com is an autonomous AI penetration testing platform that orchestrates complex security tests through terminal, browser, and editor automation, using 200+ pre-packaged Kali Linux tools in optimized Docker containers. It leverages a RAG-enabled knowledge graph with semantic memory to track co

LabEx delivers free, interactive labs for Linux, DevOps, and cybersecurity, organized into skill‑tree pathways. AI assistant Labby aids debugging, while online terminals and real‑world projects cover Docker, Kubernetes, Python, Java, Ansible, and more.

Opencomputer is a scalable, on-demand compute platform for LLM agents and AI workloads, combining VM-level isolation with sandboxed execution. It supports type-1 ephemeral sandboxes for fast cold-starts (~100ms) and type-2 persistent sandboxes for long-running agent sessions with state preservation

Termdock is a terminal-centric AI development environment that consolidates multi-workspace, multi-terminal workflows with resizable windows and picture-in-picture monitoring, AST-driven code analysis across 13+ languages, drag-and-drop CLI inputs, unified caching, search, and Git visualizations.

VibeClaw.dev is a browser-based OpenClaw runtime for running AI coding agents in sandboxed, in-browser Node.js containers. It features a complete virtual filesystem, multi-agent orchestration, and flexible model support from local WebGPU LLMs to cloud APIs, all exportable for private, reproducible w

OpenFang.sh is an open-source agent operating system that orchestrates autonomous AI agents and capability packages across macOS, Linux, and Windows. It provides a secure, sandboxed runtime with built-in tools for tasks like research, monitoring, and automation, all managed through a native desktop

PenPot.app is an open-source design platform for creating UI, wireframes, and interactive prototypes with CSS Grid and Flexbox layouts. It features AI-driven workflows for design-to-code automation, design systems management, and self-hosted deployment for enterprise control.

Beagle Security automates web, API, and GraphQL penetration testing using AI trained on 350k workflows. It runs in CI/CD, reports to Jira/Azure/Slack, cuts manual effort, reduces false positives, and gives clear remediation guidance.

Cybedefend is a cloud-based application security testing platform that utilizes AI for code analysis, offering SAST and SCA. It automates vulnerability remediation and integrates with popular developer tools, enhancing security throughout the software development lifecycle.

Stakpak is an AI DevOps terminal that streamlines the management of cloud infrastructure, automates application containerization, and enhances troubleshooting. It integrates with existing tools, provides cost insights, and supports CI/CD pipelines in an open-source framework.

Tracecat is an open‑source AI automation platform for security teams, enabling workflow automation across 200+ connectors. It offers sandboxed action execution, advanced control flow, human approval gates, and case management for structured incident response.

Pixeebot automates application security by triaging SAST/IAST findings, generating ready-to-review code fixes and pull requests, integrating with CI/CD and developer tooling, centralizing triage and metrics, and supporting multiple languages with private/self-hosted models.

Hackfast is an AI-driven tool that streamlines penetration testing by organizing scan data, automating reconnaissance, and providing contextual vulnerability insights, tailored attack paths, and project management features for efficient security assessments.

SmythOS is an open‑source Agent Operating System that manages the AI agent lifecycle—from design to production—via visual studio, SDK, CLI, and secure sandboxed runtime. It supports multi‑platform deployment, orchestration, and enterprise‑grade security.

Reasonix.io is a terminal-native AI coding agent that leverages Deepseek’s byte-stable prefix cache to achieve 90%+ cache hits, slashing input-token costs to roughly one-fifth. It runs as a single Go binary with no Node runtime, offering persistent sessions, sandboxed plan mode, and secure local cod

Dedalus Labs offers persistent full Linux VMs with VM-level kernel, memory and filesystem isolation, fast boot under 250 ms, preserved state across sessions, and CLI/API/SSH access for reproducible development, long-running agents, CI, and model workloads.

GBOX provides browser, Android, and Linux sandboxes plus RL environments for training, testing, and reproducible evaluation of agents. It includes a UI-grounding model for interface automation, iterative prototyping, debugging tools, and developer documentation.

WebTotem delivers an AI‑driven firewall that blocks brute‑force, DoS, SQLi, XSS, bot, spam, path traversal, and emerging threats, with custom IP whitelisting. It scans for malware, defacement, open ports, tracks SSL and domain expiry, scores vulnerabilities, and provides dashboards for collaboration

Depshub is a dependency management tool that automates updates, license checks, and vulnerability scans. It provides a centralized view of dependencies, integrates with platforms like GitHub, and offers AI analysis to streamline development workflows and enhance code security.

Secure.com is a 24/7 AI security operations platform that provides agentless asset discovery, continuous monitoring, and automated threat investigation. It centralizes telemetry, prioritizes high-risk incidents, and enables no-code automated response to improve detection and remediation times.

Qodex is an automated API testing platform that streamlines test creation and execution, offering features like automated test generation, uptime monitoring, and real-time failure alerts, facilitating efficient testing in CI/CD workflows for developers and QA teams.

Orca is an agent development environment for building, running, and orchestrating multi-agent workspaces with isolated worktrees, parallel agents, ghostty-style terminals, built-in editor, Git tracking, CI-aligned pipelines, observability, integrations with major LLMs, and mobile monitoring.

Bytebot is a self‑hosted, open‑source AI desktop agent for Linux that uses natural language to control the mouse, keyboard, and applications. It supports multiple AI backends, password managers, multi‑app workflows, PDF extraction, UI automation, and audit logs.

CensysGPT automates query construction for the Censys search engine, converting Shodan, ZoomEye, BinaryEdge, and legacy syntax into real‑time host reconnaissance queries. It streamlines threat‑hunting by quickly generating actionable host insights on services, ports, and metadata.

Trunk is a CI reliability platform that automates the detection and management of flaky tests, integrates with platforms like GitHub and Slack, and offers AI-powered failure analysis to enhance CI performance and maintain stability in development workflows.

Hatchways assembles, sends, and tracks take-home coding assessments via Git repos with customizable templates (bug fixes, feature work, reviews, written/video), automated tests and cloud deployment, optional human review, GitHub and ATS integrations, plus analytics for iterating assessments.

Qwiet AI unifies SAST, SCA, IaC, container, and secrets scanning into one scan, filtering for reachable, exploitable risks. It delivers 97 % true positives, cuts false positives 90%, and auto‑generates unit‑tested fixes, cutting remediation time 80 %.

ZeroThreat provides a cutting-edge DAST web app & API security scanner featuring secret, GraphQL scanning, and intelligent threat detection. It integrates smoothly with CI/CD pipelines for fast vulnerability assessment and robust proactive cybersecurity.

Vocareum delivers labs with IDEs, notebooks, and GPU/CPU clusters in isolated containers or accounts. It offers tutoring, code grading, and a unified gateway to AWS, Azure, GCP, Databricks, and foundation models. LMS integration and SOC 2 compliance enable scalable training.

Maced AI is an autonomous penetration testing platform that uses specialized AI agents to discover and exploit vulnerabilities across applications, APIs, and infrastructure. It auto-validates findings, generates one-click fixes, and delivers audit-ready reports to streamline security workflows.

SecureGPT is a free platform for security testing OpenAI ChatGPT plugins.

fe/male switch is a web-based simulation game that empowers women entrepreneurs through team collaboration, mentorship, and virtual investor connections. Users engage in challenges and access expert resources to develop essential entrepreneurial skills and track their progress.

Equixly is an AI‑driven continuous offensive security platform that maps and attacks an organization’s attack surface in real time. It automatically discovers APIs, executes adaptive attack paths, validates exploits, and delivers continuous visibility, alerts, and audit‑ready remediation tracking.

Tensordock provides cloud GPU services for AI workloads, featuring on-demand Nvidia H100, A100, and RTX 4090 GPUs. It supports rapid deployment, extensive documentation, and efficient management of virtual environments for diverse applications.

Fluidstack offers dedicated GPU clusters on bare‑metal Atlas OS, delivering rapid provisioning and full resource control. Continuous monitoring via Lighthouse ensures isolated, compliant infrastructure (GDPR, SOC 2, ISO 27001) with a 15‑minute support SLA for AI labs, enterprises, and government use

Open-claw.org is a premium, subscription-based AI deployment platform that lets you launch powerful AI agents in one click

TrustLayer is a cloud-native cybersecurity platform that unifies email security, CASB, web protection and SaaS posture management, offering centralized policy enforcement, real-time threat detection, automated response, and role-based identity controls for MSPs and midmarket IT teams.

KushoAI automates API contract tests from OpenAPI or Postman, continuously monitors contract drift, and updates suites. It runs real‑time security scans, covers API, database, and UI layers, and self‑heals tests as code evolves, providing release risk scores for ship decisions.

Vanta automates compliance evidence collection for 35+ frameworks like SOC 2, ISO 27001, HIPAA, and GDPR. It centralizes access controls, risk assessments, and vendor reviews, while AI‑driven workflows speed questionnaire responses and continuous monitoring with real‑time alerts.

CodeThreat applies AI to security analysis within development pipelines, automatically scanning pull requests and codebases to pinpoint real vulnerabilities. It filters out weak findings, provides repo‑level architectural summaries, and integrates with GitHub, GitLab, Bitbucket, and CI/CD across 27

Pi.dev is a terminal-based coding agent for developers and teams, offering TUI, RPC/SDK modes, extensible TypeScript modules and packages, multi-provider model authentication, session/context management, RAG/memory primitives, and CLI tooling for automation and integration.

Potpie automates engineering tasks with code‑aware AI agents that map entire repositories into knowledge graphs. It generates compliant, standard‑aligned PRs, offers traceability and audit trails, and integrates with GitHub, Slack, Notion, and CI tools for faster, self‑hosted workflows.

supet.sh is an agent-agnostic platform that orchestrates dozens of parallel AI coding agents in isolated git worktrees for concurrent development. It streamlines bug fixes, features, and PRs with unified workspace management, seamless IDE integration, and tools to reduce merge conflicts.

pre.dev automates end‑to‑end software development. It accepts ideas or repositories, generates architecture, writes and verifies code, then pushes to a feature branch. Integrations with GitHub, Slack, Jira via OAuth run agents in secure, multi‑stack sandboxes.

Autosana is a QA platform that enables mobile development teams to write adaptive, natural-language tests. Its self-healing capabilities reduce maintenance, supporting multiple frameworks and automating test scheduling for efficient quality assurance and early bug detection.

Cognitora is a cloud platform for running autonomous AI agents with managed GPUs, storage, persistent virtual machines, and vector DBs. It offers SDKs and integrations, sub-second sandboxed microVMs, auto-scaling, multi-agent coordination, live code execution and terminals.

Render simplifies deployment and scaling of web apps, APIs, background workers, and static sites. It supports Docker, build‑packs, native runtimes, GitHub CI/CD, automatic scaling, zero‑downtime updates, SSL, custom domains, environment variables, and CDN‑backed database add‑ons.

Binarly is a firmware security tool that automates binary analysis to identify and manage vulnerabilities in software and firmware, offering proactive risk detection, prescriptive fixes, and continuous compliance reporting for enhanced supply chain security.

CodeAnt AI automates pull‑request review, static analysis, and governance, reducing review cycles by up to 80%. It scans codebases for SAST, SCA, secrets, IaC, and SBOM compliance, enforces test coverage and linting, delivering velocity and defect metrics IDEs, Git, CI/CD.

Swif's AI-driven unified device management simplifies security, access, and compliance on MacOS, Windows, and Linux. It automates control, configures smart groups, boosts remote operations, and integrates smoothly for SOC2 certification, ensuring data protection.