Secure Exec

Secure Node.js Execution Without a Sandbox

A lightweight library for securely executing untrusted Node.js code with npm-compatible isolation, deny-by-default permissions, and resource limits, without containers or VMs.

Recent stories

1 linked story

releasePRIMARY2026-06-19

Secure Exec v0.3 rewrites in Rust and adds Bun SDK, process trees, and Node-less mode

Secure Exec v0.3 shipped a full Rust rewrite, Bun and Rust SDKs, process-tree support for spawn and exec inside the VM, and a configurable Node-less mode. It matters because agent sandboxes can tighten performance and isolation without depending on a full Node runtime.