Coming soon · in design

Isolated environments
for security work.

Spin up a real network, a real target, a real log pipeline — in seconds. Run capabilities inside it. Tear it down. Nothing touches your machine.

What's a sandbox
SANDBOX dc01 Windows Server · domain ws01 Windows · workstation fs01 Linux · SMB share kali attacker host siem collects every action SecStreet capabilities in in out
Windows target Linux target Attacker host Observability Live capability traffic

A sandbox is a real network.

Not a mock. Real Windows, real Linux, real SMB shares, real authentication. Isolated from your machine and from the internet. Disposable the moment you're done.

01 · Spin up

One command

Pick a scenario — an enterprise AD network, a web app with a misconfigured proxy, a Linux bastion. SecStreet builds it in seconds.

02 · Run

Test capabilities safely

Run any installed capability against the target. Every action is logged. Every packet is captured. Nothing leaves the boundary.

03 · Tear down

Nothing persists

When you close the sandbox, every process, every disk write, every network state vanishes. Fresh start every time.

What a session looks like.

The CLI is the interface. The sandbox is the target. Your capabilities are the tools.

sandbox · enterprise-ad-01
$secstreet sandbox start enterprise-ad-01
building scenario · 6 hosts · 1 domain · 3 users
bringing up dc01 ✓
bringing up ws01 ✓
bringing up fs01 ✓
network isolation verified
log collector ready
 
$secstreet run enum-smb-shares --target ws01
{"shares":[{"name":"HR","access":"read"},{"name":"IT","access":"none"}]}
 
$secstreet sandbox logs --tail 3
[12:04:31] ws01 → dc01 · SMB · enum shares
[12:04:31] fs01 · share HR accessed
[12:04:31] ws01 · kerberos TGT requested
 
$secstreet sandbox stop
destroying 6 hosts · 0 bytes retained

Be first when it ships.

Sandboxes are in design right now. If you want early access, leave your email. No spam, no marketing — one message when it's ready.

What you'll get
  • Instant scenarios: enterprise AD, web app, Linux bastion
  • Full session replay — every command, every packet
  • Ground truth: known weaknesses, known paths, known evidence
  • Reproducible across machines, versions, and teams
  • Disposable: nothing persists after the session ends
  • Runs locally or on a hosted runtime (your choice)