OPEN SOURCE · APACHE 2.0

The microVM sandbox for AI coding agents.

Run Claude Code, Codex and other agents inside an ephemeral microVM on Mac or Linux.

View on GitHub ↗

Free and open source, under Apache 2.0.

Built by NOFire AI

Start in your terminal

01INSTALL BRIG

02RUN YOUR AGENT

Installation guide →
RUNS ON
macOSApple Silicon
Linuxx86_64 · ARM

A REAL SESSION

Claude Code in a sandbox, working on one project.

01 / ISOLATION

Why a microVM?

Coding agents install packages, execute commands and use credentials. With auto-approval, they can do this without stopping to ask.

Brig contains the agent's execution inside a microVM, with its own Linux kernel and a hardware-enforced isolation boundary.

Read the security model →
What a sandbox mounts Two host directories reach the sandbox: the project you name, mounted read-write at /work/demo, and the guest home, mounted as the agent’s home. Other projects, your documents, your keychain and your SSH agent do not. Your machine Sandbox microVM, own kernel ~/code/demo the project you name ~/.brig/homes/<sandbox> guest home ~/code/other-project ~/Documents Keychain SSH agent /work/demo read-write /root the agent’s home: settings and history claude starts in /work/demo Nothing else from your machine is mounted.

02 / COMPATIBILITY

Use your usual agent.

Curated profiles, ready to run.

Claude CodeCodex GeminiGrokopencode

Or bring your own environment using OCI images.

Write a profile →

03 / OPEN SOURCE

Apache 2.0.
Brig, hull and hvi.

Free to use, inspect and contribute to.

On macOS, hull boots each sandbox on hvi, a microVMM built for Brig. hvi owns the guest's memory and vCPUs, serves its virtio devices, and confines itself before the guest runs. It is about 15,000 lines of Rust, plus tests.

How it is built → | Browse the source ↗ | Contribute →