Zerobox is a lightweight, cross-platform process sandboxing powered by OpenAI Codex's sandbox runtime. Single binary, no Docker, no VMs with ~10ms overhead. Zerobox offers deny by default security policy, credential injection, file access control and network filtering which lets you allow or deny outbound traffic by domain. Zerobox also offers SDKs for Rust, TypeScript, and Python with a consistent API across languages.