Sandboxie Plus 1.18.8

Sandboxie Plus: modern open-source sandboxing for Windows

Sandboxie Plus is a community-driven, open-source sandboxing utility for Windows maintained by David Xanatos (Xanasoft) alongside contributors on GitHub. Evolving from the long-running Sandboxie codebase, it uses a kernel-mode driver to intercept file, registry, and process operations and isolate applications, browsers, and installers without the resource requirements of full virtualization. The project publishes source code, release artifacts, and documentation publicly to support transparency and community maintenance.

Where to download and update

Binary installers, portable archives, signed builds, and checksums are distributed via the project website and GitHub releases. Release pages include changelogs and assets for verification, enabling users to obtain installers or portable zips and, where necessary, roll back to prior releases. Official documentation and additional resources are available from the project and developer sites.

Key features and capabilities

• Open-source codebase: Source, issues, and release materials are hosted on GitHub under a GPL-based license, allowing community review and contributions.
• Driver-level containment: A native Windows driver intercepts system calls so sandboxed programs cannot make persistent changes to the host filesystem or registry unless explicitly permitted.
• Persistent and disposable sandboxes: Create sandboxes that retain selected data across sessions or disposable sandboxes that discard all changes when closed for ephemeral testing.
• Policy and rule engine: Per-sandbox rules control file and registry access, forced programs, network behavior, and resource limits to balance compatibility and containment.
• Application and browser isolation: Run web browsers, email clients, installers, and other apps inside sandboxes to limit persistence and reduce cross-application interaction.
• User interface and tooling: A refreshed graphical interface with tray integration, context-menu commands, portable builds, and command-line options supports both novice and advanced workflows.
• Recovery and cleanup: Recover files from sandboxes when needed or securely delete sandbox contents to remove traces from the host system.
• Release transparency: GitHub releases include signed installers, portable builds, checksums, and changelogs for verification and traceability.

Security, privacy, and maintainability

• Containment of untrusted code: Sandboxed executables and installers are prevented from making uncontrolled persistent changes, reducing risk from risky files and unknown software.
• Privacy isolation: Cookies, caches, and other browsing artifacts can be confined to sandboxes to limit persistent tracking across sessions.
• Least-privilege controls: Deny-lists, restricted rights, and per-sandbox restrictions help minimize attack surface for untrusted applications.
• Community-driven maintenance: Public issue tracking, frequent commits, and published release notes provide visibility into fixes, compatibility updates, and ongoing development.

Installation, documentation, and ecosystem

• Distribution options: Official installers and portable archives are published on the project site and GitHub. Installers are signed for supported Windows builds where applicable.
• Documentation and support: Online documentation, GitHub issues, and community resources provide setup guidance, compatibility notes, and configuration examples.
• Community assets: Shared scripts, sandbox rules, and auxiliary tools from contributors simplify common use cases and integration with other security products.
• Project funding and development: Development and maintenance are supported through community contributions and sponsorship information is available via the developer site.

Performance and compatibility

• Lightweight alternative to virtualization: Sandboxie Plus isolates processes with relatively low overhead compared with full virtual machines, making it suitable for browsing, testing installers, and running untrusted utilities.
• Windows-focused support: Targeted at modern Windows releases, with behavior and compatibility influenced by host OS capabilities and driver signing requirements.
• Interoperability with security products: Generally compatible with common antivirus and endpoint solutions, though some environments may require configuration adjustments; consult the project documentation and issue tracker for known interactions.
• Advanced configuration: Exportable sandbox settings, scripting hooks, and detailed allow/deny rules enable integration into testing, development, and administrative workflows.

Intended users and use cases

1. Home users who need low-overhead containment for risky downloads, untrusted browsers, and one-off installers.
2. Developers and IT professionals requiring fast, isolated environments to test installers, updates, or configuration changes without altering the host system.
3. Privacy-focused users seeking to separate browsing data, caches, and cookies from primary profiles.