Greywall

Greywall provides a deny-by-default sandbox for AI coding agents, with kernel-enforced isolation on Linux and macOS.

github.com/GreyhavenHQ/greywall
Greywall homepage screenshot

About Greywall

Greywall is a container-free sandbox for AI coding agents on Linux and macOS. In deny-by-default mode it restricts filesystem access, network connections and system calls to what is explicitly allowed, and blocks commands such as rm -rf / and git push --force.

It also provides greywatch, an allow-by-default mode that logs network activity through greyproxy with a dashboard, and a learning mode that traces filesystem use to generate least-privilege profiles. Built-in profiles cover tools including Claude Code, Cursor and Codex. Linux use requires bubblewrap and socat.

Key features

  • Deny-by-default filesystem limited to working directory unless allowed
  • Network routing through greyproxy with live allow/deny dashboard
  • Command blocking for commands like rm -rf /
  • Built-in profiles for Claude Code, Cursor, Codex and others
  • Learning mode traces access and generates least-privilege profiles
  • Observability mode allows all network while logging activity
Best for: Developers on Linux or macOS who run AI coding agents and want to limit filesystem and network access.
Good for
  • Works without containers or Docker overhead
  • Includes one-command profiles for common AI coding agents
  • Provides learning and observability modes to review activity before locking down
Watch out for
  • Linux use requires installing bubblewrap and socat
  • Manual release tarballs include only the greywall binary
  • Supports only Linux and macOS

Greywall at a glance

Type
Open-source project
Pricing
Not confirmed. Check the site
Platforms
Linux, macOS
Open source
Yes · Source code
Language
English
Last checked
Oct 5, 2026 · Online when checked
Listed
Oct 5, 2026

Greywall alternatives

Tools and sites you could use instead, ranked by how closely they match.

All 15 alternatives

Popular in AI Code Review & Testing

Well-known listings from the same topic.

All 27

Greywall FAQ

What is the difference between greywall and greywatch?
greywall denies filesystem and network access by default to only what is allowed, while greywatch uses a permissive filesystem and allows all network requests but logs them on the greyproxy dashboard.
How can Greywall be installed?
On macOS with Homebrew, on Linux or Mac with install.sh, or with Go install, mise, manual tarballs, or building from source.
What dependencies are needed on Linux?
bubblewrap and socat are required, while xdg-dbus-proxy and libsecret-tools are optional. Status can be checked with greywall check.
Is something wrong or out of date?

Tell us and an editor will check it.

Own this website?

Claim the listing and suggest updates yourself. An editor checks every claim first.

Claim this listing