Harden-Runner is a CI/CD security agent that works like an EDR for GitHub Actions runners. It monitors network egress, file integrity, and process activity on those runners, detecting threats in real-time.
Simple plug-and-play Github Action to block unauthorized outbound traffic (egress) in your Github workflows
☄️ go-out - A Golang egress buster.
PowerShell scripts/GUI tools for the enterprise to harden Windows Defender Firewall via group policy (GPO). These can be used to enforce network level application whitelisting and strengthen the security posture of devices to defend against attacks such as software supply chain and can be used with privileged access workstations (PAW).
Find what egress ports are allowed
Secure proxy solution with filtering, real-time monitoring and a modern web UI.
Secure GitHub actions with 1 line of code
Secure-by-default OpenClaw on Ubuntu, with a verifiable security report
tethered — Runtime network egress control for Python. One function call to restrict which hosts your code can connect to.
Container Egress Traffic Filter with a GitHub Actions wrapper.
[Azure Blueprint] Learn how to deploy Azure Managed Hub-Spoke using Virtual WAN and Calico Networking
Run any project or coding agent in a sandboxed, egress-firewalled, non-root container. Drop in a config, run sluice.
Linux eBPF network kill switch for vpn apps an beyond
Deploy a firewall that should allow or drop traffic based on customisable rules
Hardened Docker sandbox for OpenAI Codex CLI with workspace-only mounts, per-project auth, and allowlisted network egress
Lightweight egress guard for servers.
Network simulation and security testing platform with 13 supported protocols, red team arsenal, active defense and traffic simulators
Disposable, hardened Docker sandbox for running untrusted code & deploying safely — read-only root, dropped Linux capabilities, and a whitelist egress proxy so malicious deps can't read your keys or phone home.
Guardrails to stop data exfiltration from AI coding agents
Add a description, image, and links to the egress-filtering topic page so that developers can more easily learn about it.
To associate your repository with the egress-filtering topic, visit your repo's landing page and select "manage topics."