Leash by StrongDM
Ranked 17 of 17 agent sandboxes by recommenders
People recommend Leash as a sandbox with strict process and network policy control, including a macOS-native mode, and as a browser that cuts screen time.
People recommend Leash as a sandbox with strict process and network policy control, including a macOS-native mode, and as a browser that cuts screen time.
6 people gave an opinion
- recommend it
- 5
- criticize it
- 1
- approval share
- 83%
Recommended in 5 of 13 months
- November 2025: recommended
- December 2025: not recommended
- January 2026: recommended
- February 2026: recommended
- March 2026: not recommended
- April 2026: not recommended
- May 2026: not recommended
- June 2026: recommended
- July 2026: not recommended
- August 2026: not recommended
- September 2026: recommended
- October 2026: not recommended
- November 2026: not recommended (month in progress)
Why it doesn’t carry the badge
- 5 people recommend itNeeds 10 or more, not met.
- 5 recommenders for every criticNeeds 2 to 1 or better, met.
- Recommended in 5 of 13 monthsNeeds 4 or more, met.
The same three rules apply to every product, and the badge can’t be bought. How the badge works
What people say about it
The reasons people give, with the number of comments that give each one. Open a reason to read what they said.
Why people recommend it
Each mark is one comment
Stricter policy control than alternatives
“It even has a --darwin macOS-native mode which goes beyond the capabilities and guarantees of sandbox-exec and bubblewrap.”
Comment from 10 Nov 2025 in “Using bubblewrap to add sandboxing to NetBSD” “goes beyond the capabilities and guarantees of the likes of sandbox-exe, bubblewrap, and in some ways docker”
Comment from 11 Nov 2025 in “The Paranoid Guide to Running Copilot CLI in a Secure Docker Sandbox” “it provides much strict policy-level control for both process-level + network-level activity”
Comment from 3 Feb 2026 in “Sandboxing AI Agents in Linux” Curbs habits and screen time
“for me it was totally enough friction to not fall into old habits”
Comment from 10 Jun 2026 in “Show HN: Leash, a low-dopamine mobile browser replacement” “I stopped algorithmically curated news for myself.”
Comment from 21 Jun 2026 in “Your brain was never designed for this much bad news” “it cut my own screentime to two hours per day”
Comment from 2 Sep 2026 in “Making the Internet Boring” Native macOS sandboxing mode
“It even has a --darwin macOS-native mode which goes beyond the capabilities and guarantees of sandbox-exec and bubblewrap.”
Comment from 10 Nov 2025 in “Using bubblewrap to add sandboxing to NetBSD” “provides a sophisticated macOS-native system extension mode”
Comment from 14 Jan 2026 in “A deep dive on agent sandboxes”
Other agent sandboxes people recommend
The four most recommended other agent sandboxes, with the same counts for each, so you can compare like for like. The tick on each bar marks the 2 to 1 line the badge needs.
| Product | Recommend | Criticize | Approval | Months | Owned | Badge |
|---|---|---|---|---|---|---|
| Docker Sandboxes | 50 | 39 | 56% | 9 | — | — |
| NVIDIA OpenShell | 36 | 8 | 82% | 9 | — | Approved |
| Claude Code sandbox | 16 | 18 | 47% | 6 | — | — |
| MXC (Microsoft Execution Containers) | 15 | 17 | 47% | 1 | — | — |
| Leash by StrongDMThis page | 5 | 1 | 83% | 5 | — | — |
What people said
All 12 comments that mention it, newest first. Each links to the original comment.
“it cut my own screentime to two hours per day”
“Parts of the right side are completely cut off.”
“this does a really great job”
“I stopped algorithmically curated news for myself.”
“for me it was totally enough friction to not fall into old habits”
“That way the blast radius is vastly reduced.”
“I'm currently using (and quite pleased with)”
“it provides much strict policy-level control for both process-level + network-level activity”
“provides a sophisticated macOS-native system extension mode”
“This is one of the use cases for Leash.”
“goes beyond the capabilities and guarantees of the likes of sandbox-exe, bubblewrap, and in some ways docker”
“It even has a --darwin macOS-native mode which goes beyond the capabilities and guarantees of sandbox-exec and bubblewrap.”
Counts come from 1,795,640 Hacker News comments, November 2025 to November 2026. How we count. Report a mistake.