Specifiction
For vendors
AdvertiseTop spots, featured rows, home sponsor Get listedAdd a product we don't cover yet Claim a listingFree: verify the domain, then correct your page Vendor dashboardNumbers, orders and placements
List your tool
Vendor dashboard
Tech riderRev. 21 Sept 2026

nono

Ch 176.5of 22 Sandbox Software
  1. 1Runs onLinux, Mac, Windows
  2. 2CostsNot stated by the maker
  3. 3Network controlsYes
  4. 4API or CLI accessYes
  5. 5Deploymentself hosted
4 lines stated Written from the maker's own pages: nono.sh
Visit site Alternatives
The nono homepage

Overview

nono is ranked #17 of 22 in sandbox software on Specifiction. It runs on Linux, macOS, Windows.

Compared on sandbox software

Network controls
Yesnono.sh
API or CLI access
Yesnono.sh
Deployment
self_hostednono.sh

Facts

Product
nono describes itself as agent runtime security with kernel-enforced boundaries for AI agents.nono.sh · 4 Oct 2026
Execution isolation
It creates ephemeral, invocation-scoped micro sandboxes for tool calls, with scoped files, network routes, arguments, and credentials.nono.sh · 4 Oct 2026
Kernel enforcement
The OS sandbox uses Landlock on Linux and Windows/WSL2 and Seatbelt on macOS; the page says no root is required.nono.sh · 4 Oct 2026
Agent compatibility
The site lists Claude Code, OpenCode, Codex, Antigravity, Goose, OpenClaw, GitHub Copilot, Qwen Code, Pi, and Hermes.nono.sh · 4 Oct 2026
Policy profiles
JSON profiles define agent access and can be version-controlled alongside code.nono.sh · 4 Oct 2026
Rollback
SHA-256 content-addressed snapshots record filesystem state before and after sessions, and the page describes restoring a session atomically.nono.sh · 4 Oct 2026
Audit
The audit trail records operations in a Merkle tree and commits a SHA-256 root at session end for integrity verification.nono.sh · 4 Oct 2026
Credential handling
The site says credentials are injected at the boundary and never exposed to the agent.nono.sh · 4 Oct 2026
Network control
The homepage describes proxy-mediated network access where policy can allow or deny requests and route out-of-policy actions for human approval.nono.sh · 4 Oct 2026
Developer interfaces
The documentation lists a CLI, a Rust core library, and Go, TypeScript, and Python SDKs.nono.sh · 4 Oct 2026
Installation
The homepage offers a shell installer, Homebrew, and links to Debian, Fedora, Arch, and Nix installation instructions.nono.sh · 4 Oct 2026
Windows caveat
On WSL2, the page reports 84% feature parity and says capability elevation and per-port network rules have limitations.nono.sh · 4 Oct 2026
Support
The documentation links to Discord for community support.nono.sh · 4 Oct 2026

Best nono alternatives

See all 20
All accessCh 01 ANY.RUN Free planFree trialAndroid Free to start8.0 All accessCh 02 Daytona Free planFree trialAPI Free to start7.6 All accessCh 03 Northflank Free planAPILinux Free to start7.4 All accessCh 04 Zscaler Private Access AndroidiOS 7.4 All accessCh 05 Docker Desktop Free planLinuxMac from $9/mo7.3 All accessCh 06 microsandbox Free planAPILinux from $49/mo7.2

Where it ranks on Specifiction

Is nono yours?

Claim it for free: prove the domain, then correct facts, plans and screenshots. An editor reviews every change.

Claim it free Promote nono

Sources