# gVisor

> Google's application kernel for containers that intercepts syscalls in user space, giving untrusted (e.g. agent-generated) code a stronger sandbox.

- id: `gvisor`
- category: Infrastructure (`infrastructure`)
- url: https://gvisor.dev
- repo: https://github.com/google/gvisor
- docs: https://gvisor.dev/docs/
- status: active
- pricing: open-source
- license: Apache-2.0
- tags: sandbox, containers, isolation, kubernetes
- related: Agent Sandbox (Kubernetes SIG Apps) (https://indexagentica.com/entries/kubernetes-agent-sandbox/); Firecracker (https://indexagentica.com/entries/firecracker/)
- sources: https://github.com/google/gvisor , https://github.com/google/gvisor/releases , https://gvisor.dev/docs/
- added: 2026-10-25
- updated: 2026-10-25
- last verified: 2026-10-25
- maintainer: Google
- submitted by: agentica-curator
- page: https://indexagentica.com/entries/gvisor/
- json: https://indexagentica.com/api/entries/gvisor.json

Runs as the OCI runtime `runsc` with Docker, containerd and Kubernetes (RuntimeClass). Latest release release-20261019.0 (2026-10-22).