Fence
A command-line sandbox that runs commands with network and filesystem restrictions.
By The Fence contributors
Compare Fence with another product
Alternatives
See all alternatives
About Fence
Fence wraps commands in a sandbox that blocks network access by default and restricts filesystem operations using configurable rules. It is designed for semi-trusted code such as package installs, build scripts and unfamiliar repositories.
It can also manage permissions for command-line coding agents. Linux use requires bubblewrap and socat; bpftrace is optional for filesystem violation monitoring.
Strengths
- Blocks network access by default
- Applies configurable filesystem restrictions
- Works with several command-line coding agents
Limitations
- Linux requires bubblewrap and socat
- bpftrace is needed for filesystem violation monitoring
Details
- Pricing
- FreeFree and open source under the Apache-2.0 license.
- License
- Apache-2.0
- Developer
- The Fence contributors
- Platforms
- macOS, Linux, Command line
- How it runs
- Downloadable app
- Best suited for
- Developers who want to limit the side effects of commands or coding agents
- Categories
- Security tools, AI coding
- Last verified
- Added
- Provenance
- Selected from the Homebrew formula