Sign in
NVIDIA OpenShell logo

NVIDIA OpenShell

Active

NVIDIA's open-source runtime that sandboxes autonomous AI agents under enforced policy

Visit websiteCompare
Conditional

OpenShell is NVIDIA's free, Apache-2.0 runtime that sandboxes autonomous agents with kernel-level file, syscall and network policy, injects credentials only for approved endpoints, and checks policy changes before you approve them. Conditional because it is at 0.1.x, Windows runs through WSL 2 and is marked experimental, and anonymous telemetry is on by default. Right for teams that want to trial policy-enforced agent isolation on Linux or Apple Silicon; we have not tested it.

AI-Powered

Isolation runtime that hosts third-party agents under enforced policy; the pages read describe no model loop of its own.

Is it right for you?

Good for

  • Bounding what an agent can touch: kernel-level controls restrict file access, system calls and network connections per declared policy
  • Keeping real credentials away from the agent: they are added only to requests bound for approved endpoints
  • Reviewing permission changes: policy changes are verified to flag risky new access before approval, with human review for sensitive ones
  • Running many sandboxes under one control plane: gateways manage sandboxes and policies, with Helm deployment on Kubernetes and SDKs for Python, TypeScript, Go and Rust

Not good for

  • A production dependency today: the project is at 0.1.x, with v0.1.0 published on GitHub on September 25, 2026
  • Windows-first teams: Windows is supported through WSL 2 and marked experimental
  • Environments that cannot allow telemetry: anonymous operational telemetry is on by default and must be turned off with an environment variable
  • A ready-to-run agent: the default sandbox image is a minimal Ubuntu with no agent in it

Our experience

We haven't tested NVIDIA OpenShell ourselves. This profile is based on public documentation, user reviews, and community feedback.

Pricing

Open Source
Open source$0
  • Apache License 2.0
  • Self-hosted via install script or Helm on Kubernetes
  • No paid tier on the pages we read
View full pricing

No verdict changes yet

The clock starts day one. Changes land here as our verdict evolves.

Sources

Verification log

  • Profile· No changes

    Automated agent

How we evaluate

Want this running in your business?

We tested this tool and we build with tools like it every day. Tell us the workflow and we will set it up, integrate it and hand it over working.

Tell us what you need (opens in new tab)See what we build

The conversation runs on Gnosari, one of the tools in this directory. A real conversation, not a sales script.