# Matchlock

9 Hacker News commenters recommended Matchlock and 2 criticized it, November 2025 to November 2026. It was recommended in 3 of 13 months.

**Verdict:** Free tool that runs AI agents in microVMs with deny-all networking and domain allowlisting, which people call the right design for the job.

## Why people recommend it

- Deny-all networking and domain allowlisting (3 comments): "matchlock does have the network-layer controls you mentioned, such as domain whitelisting and secret protection toward designated hosts" ([source](https://news.ycombinator.com/item?id=46934465)) "the main thing matchlock adds over general-purpose vm/container tooling is agent specific network and filesystem (wip) controls" ([source](https://news.ycombinator.com/item?id=46934546)) "Matchlock intercepts and controls all network traffic by default, with deny-all networking and domain allowlisting." ([source](https://news.ycombinator.com/item?id=46933781))
- Designed for AI agent sandboxing (3 comments): "the main thing matchlock adds over general-purpose vm/container tooling is agent specific network and filesystem (wip) controls" ([source](https://news.ycombinator.com/item?id=46934546)) "Matchlock[0] is probably the best solution I've come across so far WRT problem 1 and 2" ([source](https://news.ycombinator.com/item?id=47310311)) "I think matchlock is the right design for this context" ([source](https://news.ycombinator.com/item?id=50203130))
- Stronger isolation than containers (3 comments): "the main thing matchlock adds over general-purpose vm/container tooling is agent specific network and filesystem (wip) controls" ([source](https://news.ycombinator.com/item?id=46934546)) "The microVM is the real isolation boundary — seccomp is defense in depth." ([source](https://news.ycombinator.com/item?id=46934232)) "even more secure alternative" ([source](https://news.ycombinator.com/item?id=46986018))
- Usable base features and performance (2 comments): "I like the base features you built in." ([source](https://news.ycombinator.com/item?id=46934353)) "Mostly for performance and usability." ([source](https://news.ycombinator.com/item?id=46933348))

## Alternatives hackers recommend

- [Bubblewrap (bwrap)](https://hackerapproved.com/p/bubblewrap.md): 109 recommend
- [Agent Safehouse](https://hackerapproved.com/p/agent-safehouse.md): 43 recommend
- [nono](https://hackerapproved.com/p/nono.md): 34 recommend
- [Firejail](https://hackerapproved.com/p/firejail.md): 30 recommend
- [sandbox-exec](https://hackerapproved.com/p/sandbox-exec.md): 25 recommend

## Cite as

Hacker Approved, "Matchlock", https://hackerapproved.com/p/matchlock/ (counts from 1,795,640 Hacker News comments, November 2025 to November 2026).