Show HN: Popcorn: a security workbench of disposable microVMs

Category: security

Tags: microvm, sandboxing, firecracker, security, ai-assistant

Score: 6.8/10 (Innovation: 7, Technical: 8, Documentation: 6, Utility: 6)

Popcorn is a security workbench that runs risky workloads like untrusted code or unknown binaries inside disposable Firecracker microVMs called 'corns'. It combines VM isolation with a network gate that requires per-host approval, a token proxy that keeps Claude credentials on the host, and a file review workflow for exporting changes, making it a practical sandbox for AI-assisted development.

Target audience: security engineers, backend devs, AI-assisted developers

Repository: https://github.com/KunalSin9h/popcorn · Rust · NOASSERTION · 3 stars

View on Hacker News