Qafas Sandbox
Run your LLM coding agent's commands in a sandbox on your own hardware. Every command is contained, with a size it cannot raise and no network except what you allow, so the agent and its API keys stay outside. Sandboxes run on native, VM or Firecracker tiers, and a timeline shows every process, file and network call, with alerts when something reaches for credentials or tries to break out. Qafas is Arabic for “cage”.
01
ContainedA size it cannot raise and no network except what you allow.
02
VisibleA timeline of every process, file and network call, plus escape and credential alerts.
03
YoursOne control plane and your own worker hosts. No cloud, no phone-home.
04
Air-gap friendlyEvery artifact can be carried into an air-gapped site.