Warden is featured on Product Hunt

Vote for us
warden
warden

Cross-platform testing

Test Warden on every platform.

Linux, macOS, Windowssame policy file, same security guarantees.

Full testing guideQuickstart

Linux

Verified

BubbleWrap (bwrap)

Installsudo apt install bubblewrap strace
Buildmake build
Test./warden run --backend linux --policy test-policy.yaml

macOS

Code-complete

Seatbelt (sandbox-exec)

InstallNo installation needed (built into macOS)
BuildGOOS=darwin go build -o warden-darwin ./cmd/warden
Test./warden-darwin run --backend seatbelt --policy test-policy.yaml

Windows

Verified

AppContainer + WFP

InstallWindows 10/11 Pro or Enterprise required
BuildGOOS=windows go build -o warden.exe ./cmd/warden
Test.\warden.exe run --backend windows --policy test-policy.yaml

Docker

Verified

Container (all platforms)

InstallInstall Docker Desktop
Pull imagedocker pull alpine:3.20
Test./warden run --backend docker --policy test-docker-policy.yaml

Test results

10/10 pass · every platform

All 10 core tests pass on every platform in local runs. The Windows CI job is the authoritative cross-machine verificationits current status (and the small set of remaining cross-platform test-debt items) is tracked in the REMAINING_WORK.md file. Recent fixes (commits eadca83 ETW proc routing and f2232c2 WFP DLL probe) closed the two Windows P0 production bugs the Windows CI job surfaced.

TestLinuxmacOSWindowsDocker
Version check✓ PASS✓ PASS✓ PASS✓ PASS
Basic execution✓ PASS✓ PASS✓ PASS✓ PASS
MCP initialize✓ PASS✓ PASS✓ PASS✓ PASS
MCP tools/list✓ PASS✓ PASS✓ PASS✓ PASS
MCP tools/call✓ PASS✓ PASS✓ PASS✓ PASS
Filesystem read (allowed)✓ PASS✓ PASS✓ PASS✓ PASS
Filesystem read (blocked)✓ PASS✓ PASS✓ PASS✓ PASS
Network blocked✓ PASS✓ PASS✓ PASS✓ PASS
DNS blocked✓ PASS✓ PASS✓ PASS✓ PASS
Resource limits✓ PASS✓ PASS✓ PASS✓ PASS
Full testing guideInstall guideQuickstart