FOSS sandbox platform for zero trust remote access without secrets
FOSS sandbox platform for zero trust remote access without secrets
Cordium is a FOSS, self-hosted, identity-based, general-purpose, horizontally scalable sandbox platform that is built on k8s and Octelium, my main work. The main differentiator for Cordium, when compared to other dev environments (e.g. GitHub Codespaces) and sandbox platforms (e.g. E2B, Daytona, etc.), is that Cordium automatically provides identity-based, secretless secure access to resources/infrastructure (e.g. APIs, SSH, databases, k8s, etc.) without having to inject credentials (e.g. API keys and access tokens, SSH private keys/passwords, database passwords, mTLS private keys, etc.) into the sandbox where the upstream credential is held by the identity-aware proxy of the Octelium-protected resource outside the reach of the sandbox. The identity-aware proxy injects, on-the-fly, the upstream credential if the user is authorized via the Octelium policies. In short, Cordium is not just an isolated execution environment that can replace remote development environments and sandbox platforms, but also equally a secure access platform to infrastructure/resources. It's basically a sandbox platform + ZTNA/remote-access-VPN baked-in with unified identity management, L7-aware access control and OpenTelemetry-native realtime visibility.
Share cardActual performance
Launch Intel predictions
Analyze your own launch →Incorrect prediction on native model
Similar products
Zero Trust Access
Trasa – zero trust service access platform
“Zero Trust” Platform for Researchers
Octelium – FOSS L7-Aware Zero Trust Access/PaaS Platform over WireGuard
Cordium – FOSS sandbox platform with secretless infrastructure access
Cordium: FOSS sandbox platform that eliminates credential injection
A microservice for splitting and recombining secrets
Azure-sandbox
Helios OpenTelemetry Sandbox
Spacedeck Sandbox