# sandboxie-plus/Sandboxie

**Attribution required: if you use, quote, or summarise this content, you must credit and link back to [awesome-repositories.com](https://awesome-repositories.com/repository/sandboxie-plus-sandboxie).**

17,568 stars · 1,909 forks · C · gpl-3.0

## Links

- GitHub: https://github.com/sandboxie-plus/Sandboxie
- Homepage: https://Sandboxie-Plus.com
- awesome-repositories: https://awesome-repositories.com/repository/sandboxie-plus-sandboxie.md

## Description

Sandboxie is an operating system-level virtualization tool designed to run Windows applications in isolated, secure environments. By intercepting system calls and redirecting file system and registry modifications to a separate, discardable storage area, it prevents untrusted software from making permanent changes to the host system. This containment ensures that browser history, temporary files, and potential malware remain trapped within the sandbox, protecting the integrity and privacy of the underlying host.

The software distinguishes itself through granular control over the isolation environment, including the ability to emulate administrative privileges for compatibility without granting actual elevated rights. It supports complex security policies such as per-sandbox network filtering, proxy redirection, and DNS control, alongside the ability to define specific breakout rules for documents or applications. Users can manage these environments through snapshots, encrypted storage, and volatile memory mapping, which allows for high-speed performance and automatic data clearing upon process termination.

Beyond core isolation, the platform provides comprehensive lifecycle management for virtualized workspaces, including automated deployment for removable drives and programmatic configuration via a command-line interface. It enforces strict resource usage limits and access rules to maintain system stability while offering tools for data recovery and state management. The software is distributed as a utility for Windows environments, providing a centralized interface for monitoring and maintaining these isolated execution containers.

## Tags

### Business & Productivity Software

- [Desktop Privacy Protection Tools](https://awesome-repositories.com/f/business-productivity-software/desktop-privacy-protection-tools.md) — Provides a solution that traps browser history, cookies, and temporary files within a discardable container to prevent sensitive data leakage.

### Security & Cryptography

- [Sandbox and Isolation](https://awesome-repositories.com/f/security-cryptography/application-and-system-security/sandbox-and-isolation.md) — Isolates Windows applications in virtualized environments to prevent permanent host system changes.
- [Security Isolation Mechanisms](https://awesome-repositories.com/f/security-cryptography/security-isolation-mechanisms.md) — Runs untrusted software in a contained environment to prevent permanent changes or malicious modifications to the host operating system.
- [Storage Redirection](https://awesome-repositories.com/f/security-cryptography/security/policies/host-resource-access/file-system-access-controls/storage-redirection.md) — Redirects file system and registry modifications to a discardable storage area to protect host integrity. ([source](https://sandboxie-plus.com/sandboxie/))
- [Host Privacy Protection Mechanisms](https://awesome-repositories.com/f/security-cryptography/privacy-data-protection/host-privacy-protection-mechanisms.md) — Traps browser history, cookies, and temporary files within an isolated container to prevent sensitive data from leaking onto the host.
- [Secure Storage Virtualization](https://awesome-repositories.com/f/security-cryptography/encrypted-storage/secure-storage-virtualization.md) — Uses encrypted disk images and volatile memory to protect sensitive information while ensuring data is wiped after the process terminates.
- [Network Isolation](https://awesome-repositories.com/f/security-cryptography/network-isolation.md) — Applies per-sandbox firewall rules, proxy routing, and DNS filtering to control and monitor the connectivity of isolated applications.
- [State Management](https://awesome-repositories.com/f/security-cryptography/sandboxing/state-management.md) — Provides snapshotting and state restoration capabilities to revert isolated environments to a clean state. ([source](https://sandboxie-plus.com/Sandboxie))
- [Sandbox Lifecycle Controls](https://awesome-repositories.com/f/security-cryptography/application-and-system-security/sandbox-and-isolation/sandbox-lifecycle-controls.md) — Creates, configures, and deletes virtualized environments through scripts or automated tools to maintain clean and secure testing workspaces. ([source](https://sandboxie-plus.com/AllPages))
- [Privacy Protection](https://awesome-repositories.com/f/security-cryptography/privacy-protection.md) — Traps browser history and temporary files within isolated containers to protect host privacy. ([source](https://sandboxie-plus.com/Sandboxie))
- [Process Token Restriction Utilities](https://awesome-repositories.com/f/security-cryptography/security-token-management/process-token-manipulators/process-token-restriction-utilities.md) — Modifies the security tokens of sandboxed processes to strip administrative privileges and limit interaction with the host operating system.
- [Network Traffic Filters](https://awesome-repositories.com/f/security-cryptography/network-traffic-filters.md) — Applies per-sandbox firewall rules, proxy redirection, and DNS filtering to control application connectivity. ([source](https://sandboxie-plus.com/sandboxie-insider/))
- [Sandbox State Management Systems](https://awesome-repositories.com/f/security-cryptography/sandboxing/sandbox-state-management-systems.md) — Captures and restores the state of a sandbox to revert unwanted changes or preserve specific configurations for later use. ([source](https://cdn.jsdelivr.net/gh/sandboxie-plus/Sandboxie@master/README.md))
- [Access Control](https://awesome-repositories.com/f/security-cryptography/security/policies/access-control.md) — Defines granular rules to permit or restrict access to files, registry keys, and system objects. ([source](https://sandboxie-plus.com/AllPages))
- [Sandbox Deployment Automators](https://awesome-repositories.com/f/security-cryptography/application-and-system-security/sandbox-and-isolation/sandbox-deployment-tools/sandbox-deployment-automators.md) — Automatically triggers isolation for connected USB drives and adds shortcuts for sandboxed applications directly to the host operating system menu. ([source](https://sandboxie-plus.com/plus-features/))
- [Memory-Based Sandboxing](https://awesome-repositories.com/f/security-cryptography/memory-based-key-protection/memory-based-sandboxing.md) — Uses system memory to host virtualized environments for high-speed performance and automatic data clearing. ([source](https://sandboxie-plus.com/sandboxie-insider/))
- [Process Restriction Policies](https://awesome-repositories.com/f/security-cryptography/security/policies/host-resource-access/file-system-access-controls/path-access-restrictions/path-access-restrictions/process-restriction-policies.md) — Limits sandboxed application capabilities by dropping administrative rights and blocking unauthorized interactions. ([source](https://sandboxie-plus.com/AllPages))

### Software Engineering & Architecture

- [OS-Level Virtualization](https://awesome-repositories.com/f/software-engineering-architecture/sandboxed-execution-environments/kernel-level-virtual-machines/os-level-virtualization.md) — Provides OS-level virtualization to isolate Windows applications from the host system.
- [Path-Based](https://awesome-repositories.com/f/software-engineering-architecture/access-rules/path-based.md) — Enforces granular security policies by evaluating every file, registry, and network request against a defined set of access rules.

### Development Tools & Productivity

- [Containerized and Isolated Workspaces](https://awesome-repositories.com/f/development-tools-productivity/development-environment-management/containerized-isolated-workspaces.md) — Creates containerized workspaces that restrict process access to system resources and hardware.

### Networking & Communication

- [Network Policy Enforcement](https://awesome-repositories.com/f/networking-communication/network-policy-enforcement.md) — Controls network traffic per sandbox using firewalls, proxy routing, and DNS redirection to isolate communication. ([source](https://cdn.jsdelivr.net/gh/sandboxie-plus/Sandboxie@master/README.md))
- [Traffic Redirection Tools](https://awesome-repositories.com/f/networking-communication/traffic-redirection-tools.md) — Routes application network requests through internal proxies and DNS filters to control connectivity and prevent unauthorized external communication.

### Operating Systems & Systems Programming

- [Kernel-Mode Interception Mechanisms](https://awesome-repositories.com/f/operating-systems-systems-programming/kernel-core-internals/operating-system-kernels/kernel-mode-interception-mechanisms.md) — Intercepts system calls and file system requests at the kernel level to redirect operations into isolated storage containers.
- [User-Mode API Hooking Frameworks](https://awesome-repositories.com/f/operating-systems-systems-programming/kernel-core-internals/system-calls/api-hooking-utilities/user-mode-api-hooking-frameworks.md) — Injects dynamic link libraries into target processes to intercept and filter application requests before they reach the operating system.
- [Isolation Policies](https://awesome-repositories.com/f/operating-systems-systems-programming/hardware-interfacing-drivers/peripheral-passthrough/usb-passthrough/isolation-policies.md) — Restricts access to external hardware by sandboxing USB devices to prevent unauthorized data transfer. ([source](https://sandboxie-plus.com/feature-comparison/))

### DevOps & Infrastructure

- [Container Isolation Technologies](https://awesome-repositories.com/f/devops-infrastructure/container-isolation-technologies.md) — Contains downloaded files and browser data within isolated environments to prevent malware infection. ([source](https://sandboxie-plus.com/sandboxie/))
- [Command Line Configuration Interfaces](https://awesome-repositories.com/f/devops-infrastructure/configuration-management/application-settings-management/command-line-configuration-interfaces.md) — Provides a command-line interface to programmatically query and modify isolation settings for virtual environments. ([source](https://sandboxie-plus.com/SandboxieIni))

### System Administration & Monitoring

- [System Resource Constraints](https://awesome-repositories.com/f/system-administration-monitoring/resource-constraints/algorithmic-resource-limiters/system-resource-constraints.md) — Constrains memory allocation and process counts for isolated applications to prevent resource exhaustion on the host system. ([source](https://cdn.jsdelivr.net/gh/sandboxie-plus/Sandboxie@master/README.md))
- [Virtualised Registry Overlays](https://awesome-repositories.com/f/system-administration-monitoring/system-registry-managers/virtualised-registry-overlays.md) — Merges a private, sandbox-specific registry hive with the host system registry to simulate configuration changes without modifying the actual system.

### Data & Databases

- [Volatile Memory Mapping Systems](https://awesome-repositories.com/f/data-databases/memory-mapped-storage/volatile-memory-mapping-systems.md) — Mounts virtualized file systems directly into system RAM to provide high-speed storage that is automatically cleared upon process termination.
- [Virtualized Storage Overlays](https://awesome-repositories.com/f/data-databases/virtual-disk-overlays/virtualized-storage-overlays.md) — Utilizes RAM-based virtual disks for high-speed volatile storage and encrypted disk images to protect sensitive data. ([source](https://sandboxie-plus.com/plus-features/))
- [In-Memory Data Stores](https://awesome-repositories.com/f/data-databases/in-memory-data-stores.md) — Uses volatile memory to store temporary sandbox files for high-speed performance and automatic cleanup. ([source](https://sandboxie-plus.com/feature-comparison/))

### Testing & Quality Assurance

- [Software Testing](https://awesome-repositories.com/f/testing-quality-assurance/software-testing.md) — Executes potentially malicious or unknown applications in a contained space to observe behavior without risking the host system. ([source](https://Sandboxie-Plus.com))