Microsoft Execution Containers logo

Microsoft Execution Containers

Activo

Microsoft's open-source, policy-driven containment layer for AI agents and untrusted code

Condicional

Microsoft Execution Containers is a free, MIT-licensed containment layer: you declare in one JSON policy what an agent may touch, and a process, session, WSL or microVM backend enforces it on Windows 11, macOS and Linux. Conditional because the microVM backend is experimental, the session and WSL backends run only on Windows 11, and Claude Code support is only planned. The evidence we read is Microsoft's own announcement and repository, with no independent security assessment. It suits teams embedding agents in products.

Con IA

Containment runtime that hosts third-party agents under a JSON policy; it runs no model itself.

¿Es adecuada para ti?

Bueno para

  • Declaring an agent's file, network, process and UI boundaries once in a JSON policy and enforcing it across Windows 11, macOS and Linux
  • Finding out what an agent needs before locking it down: Learning mode blocks and records ungranted access in JSON reports
  • Embedding containment in your own product through SDKs for Rust, .NET and Node.js under an MIT license
  • Windows 11 setups that want a separate desktop and clipboard (session container) or a Linux environment (WSL container)

No recomendado para

  • Hardware-backed isolation you can rely on today: the microVM backend is marked experimental
  • Session or WSL containers on macOS or Linux: those backends are Windows 11 only
  • Running Claude Code, Box, Egnyte, Perplexity or Raycast under MXC today: Microsoft lists them as planned, not shipped
  • Judging isolation strength independently: the pages we read hold no third-party security assessment

Nuestra experiencia

We haven't tested Microsoft Execution Containers ourselves. This profile is based on public documentation, user reviews, and community feedback.

Precios

Código abierto
Open source (MIT)$0
  • MIT license per the repository
  • SDKs: Rust, .NET, Node.js
  • No paid tier named on the pages we read
Ver precios completos

Aún no hay cambios de veredicto

El reloj corre desde el primer día: los cambios aparecerán aquí a medida que evolucione nuestro veredicto.

Registro de verificación

  • Perfil· Sin cambios

    Agente automatizado

Cómo evaluamos

¿La quieres funcionando en tu empresa?

Hemos probado esta herramienta y construimos con herramientas así cada día. Cuéntanos el flujo de trabajo y la instalamos, la integramos y te la entregamos funcionando.

La conversación funciona con Gnosari, una de las herramientas de este directorio. Una conversación real, no un guion de ventas.