aicoolies logo
NVIDIA OpenShell logo
NVIDIA OpenShell logo

NVIDIA OpenShell

Secure sandboxed runtime for AI agent execution

open sourceupdated Jul 12, 2026

NVIDIA OpenShell provides kernel-level isolation for AI agent workloads with Landlock, seccomp, and network namespace sandboxing. Announced at GTC 2026 with 17 enterprise partners including Adobe, Atlassian, SAP, and Salesforce, it offers declarative YAML policy enforcement, L7 HTTP inspection, and GPU passthrough — purpose-built to contain the blast radius when autonomous coding agents interact with filesystems and networks.

NVIDIA OpenShell is an open-source runtime security framework specifically designed for AI agent workloads. As coding agents like Claude Code, Codex, and OpenCode gain direct access to filesystems, shell commands, and network resources, the security implications grow proportionally. OpenShell addresses this by providing kernel-level isolation using Landlock for filesystem access control, seccomp for system call filtering, and network namespaces for network isolation — all configured through a declarative YAML policy engine that lets teams define exactly what an agent is allowed to do.

Announced at NVIDIA GTC 2026 with backing from 17 major enterprise partners including Adobe, Atlassian, SAP, Salesforce, ServiceNow, Siemens, Cisco, CrowdStrike, Red Hat, and Box, OpenShell is positioned as critical infrastructure for the agentic AI era. Its L7 HTTP inspection proxy can intercept and filter agent network requests before they leave the sandbox, preventing data exfiltration or unauthorized API calls. GPU passthrough support means agents can still leverage hardware acceleration for compute-intensive tasks while remaining fully sandboxed. The NemoClaw reference stack builds on OpenShell specifically for securing OpenClaw deployments.

For development teams adopting AI coding agents at scale, OpenShell provides the security boundary that makes autonomous code execution acceptable in enterprise environments. If a compromised agent attempts to access restricted directories, make unauthorized network requests, or execute dangerous system calls, OpenShell blocks the action at the kernel level — not through prompt-level guardrails that can be bypassed. The project is Apache-2.0 licensed with over 4,200 GitHub stars and active development as a core component of the NVIDIA Agent Toolkit.

Pricing

Free and open source (Apache-2.0). Part of NVIDIA Agent Toolkit.

Platforms

Linux (kernel-level sandboxing). Docker deployment. GPU passthrough support for NVIDIA GPUs.

Categories

Tags

Use Cases

Related Tools

computed discovery: shared active categories · kept separate from editor-verified Alternatives

Agent Skills logo

Agent Skills

Open standard for portable skills across AI agents

Agent Skills is the open SKILL.md folder specification for packaging reusable instructions, scripts, references, and assets that compatible AI agents load through progressive disclosure. Originally developed by Anthropic and released as an open standard, it defines the portable format itself—not an example library, marketplace, or hosted agent product.

Open Source
KTransformers parent kvcache-ai logo

KTransformers

Heterogeneous CPU-GPU inference and SFT for large MoE models

Open-source framework for running and fine-tuning large Mixture-of-Experts models with heterogeneous CPU-GPU execution, optimized kernels, limited VRAM and SGLang or LLaMA-Factory integrations.

Open Source
vLLM Production Stack parent vLLM logo

vLLM Production Stack

Official Kubernetes and Helm reference stack built on the vLLM inference engine

Official vLLM reference implementation for scaling the existing inference engine on Kubernetes with Helm, request routing, KV-cache offload, autoscaling and Prometheus/Grafana observability.

Open Source
Dynamo logo

NVIDIA Dynamo

Distributed inference orchestration above vLLM, SGLang and TensorRT-LLM

Open-source, datacenter-scale orchestration layer that coordinates vLLM, SGLang and TensorRT-LLM across nodes with disaggregated serving, KV-aware routing, multi-tier cache management and automatic scaling.

Open Source
GPUStack logo

GPUStack

Open-source GPU control plane for scalable AI model serving

Open-source GPU cluster manager that configures vLLM, SGLang, TensorRT-LLM or custom engines, serves models through compatible APIs, and provisions SSH-accessible GPU instances across on-premises, Kubernetes and cloud environments.

Open Source
Mooncake logo

Mooncake

Disaggregated KV cache storage and transfer for LLM serving

Open-source infrastructure for disaggregated LLM serving that pools KV caches across prefill and decode workers, with high-performance transfer, distributed storage and integrations for vLLM and SGLang.

Open Source

Used in Stacks

FAQ

What is NVIDIA OpenShell?

NVIDIA OpenShell provides kernel-level isolation for AI agent workloads with Landlock, seccomp, and network namespace sandboxing. Announced at GTC 2026 with 17 enterprise partners including Adobe, Atlassian, SAP, and Salesforce, it offers declarative YAML policy enforcement, L7 HTTP inspection, and GPU passthrough — purpose-built to contain the blast radius when autonomous coding agents interact with filesystems and networks.

Is NVIDIA OpenShell free?

Yes — NVIDIA OpenShell is open source and free to use. Free and open source (Apache-2.0). Part of NVIDIA Agent Toolkit.

Is NVIDIA OpenShell open source?

Yes — NVIDIA OpenShell is open source.

What are the best NVIDIA OpenShell alternatives?

The top editor-verified NVIDIA OpenShell alternatives are E2B, Microsandbox, Lume.