AI Tried to Escape My Sandbox. It Couldn't.
I built Warden to sandbox MCP servers, then gave AI a scenario to break out. On Linux 8/8 proof-harness steps held; on Windows 5/5 attack scenarios were blocked. Here's the evidence.
By Prof-bilal
Warden is featured on Product Hunt
Vote for usSecurity
Sandboxing, trust boundaries, and practical security for MCP servers and AI tooling.
Deny-by-Default: Why 'Permission Denied' Isn't Enough
Warden makes ungranted paths invisible instead of unreadable — bind mounts, not permission bits. Why invisibility is the stronger boundary, and how it's tested.
By Prof-bilal
Why MCP Servers Need Sandboxes
MCP servers run as local processes with your full user permissions. Here's why deny-by-default sandboxing is the missing trust boundary between AI tooling and your machine.
By Prof-bilal