Sandboxie Plus 1.18.1

Sandboxie Plus: modern open-source sandboxing for Windows

Sandboxie Plus is a community-driven, open-source sandboxing utility for Windows maintained by David Xanatos (Xanasoft) and the GitHub project community. Built on the long-running Sandboxie codebase and published with regular binary releases on GitHub, Sandboxie Plus combines driver-level interception, configurable policy rules, and a refreshed user interface to isolate applications, browsers, and installers without the overhead of full virtualization.

What’s new and where to download

Active development and frequent GitHub releases mean installers, portable zips, checksums, and detailed changelogs are published for each release. Official downloads and documentation are available from the project site and the developer’s site, and release artifacts on GitHub include signed installers and portable builds for quick testing or deployment.

Key features and capabilities

• Open-source transparency: Source code, issues, and release artifacts are hosted publicly on GitHub, enabling community review, rapid issue tracking, and contributions under a GPL-based open-source license.
• Driver-based process isolation: Uses native Windows drivers to intercept file, registry, and process operations so changes by sandboxed apps remain contained until explicitly committed.
• Multiple sandbox types: Create persistent sandboxes that retain chosen data across sessions or disposable sandboxes that remove all changes on close for ephemeral testing.
• Fine-grained policy engine: Per-sandbox rules for file/registry access, forced programs, network controls, and resource limits allow precise containment and compatibility tuning.
• Browser and application isolation: Run web browsers, email clients, and plugins inside dedicated sandboxes to limit persistence, reduce tracking, and reduce cross-application contamination.
• Modern UI and tooling: Redesigned graphical interface, tray integration, context-menu commands, portable builds, and command-line options streamline workflows for both novice and advanced users.
• File recovery and secure cleanup: Recover files from sandboxes when needed or securely delete sandbox contents to remove traces from the host system.
• Release artifacts and rollback: GitHub releases include assets and release notes so users can verify checksums, install signed binaries, and roll back to prior versions if needed.

Security, privacy, and maintainability

• Containment of malware and risky files: Sandboxed executables and installers are prevented from making persistent changes to the host filesystem and registry unless deliberately allowed.
• Privacy controls: Keep cookies, caches, and tracking artifacts inside sandboxes to reduce cross-session fingerprinting and persistent tracking.
• Least-privilege configuration: Apply restricted rights, deny-lists, and per-sandbox restrictions to minimize attack surface for untrusted applications.
• Community scrutiny and active maintenance: Public issue tracking and frequent commits on GitHub provide visibility into fixes, regressions, and feature development; maintainers publish release notes and respond to compatibility reports.

Installation, updates, and ecosystem

• Multiple distribution options: Official installers and portable archives are distributed via the project site and GitHub releases. Installers include driver signing for supported Windows builds where applicable.
• Documentation and support channels: Online docs, GitHub issues, and community threads offer setup guidance, compatibility tips, and configuration examples for common security products.
• Community add-ons and settings: Shared scripts, sandbox rules, and helper tools are published by the project and community contributors to simplify common use cases and interoperability.
• Funding and development: Development is supported by community contributions and donations; the developer site provides information on sponsoring and supporting ongoing maintenance.

Performance and compatibility

• Lightweight alternative to VMs: Sandboxie Plus adds minimal overhead compared with full virtual machines, making it suitable for everyday browsing, testing installers, and running untrusted tools.
• Windows-focused support: Targeted at modern Windows releases (Windows 7 through Windows 11 and newer builds where applicable) with both 32-bit and 64-bit application support determined by host OS capabilities.
• Antivirus and endpoint interoperability: Generally compatible with common AV and endpoint products, but some environments require driver exclusions or configuration tweaks—consult GitHub issues and docs for known interactions.
• Advanced configuration for power users: Export/import sandbox settings, script actions, and apply detailed allow/deny rules to integrate Sandboxie Plus into testing and development workflows.

Who benefits most from Sandboxie Plus?

1. Home users seeking low-overhead protection for risky downloads, untrusted browsers, and one-off installers.
2. Developers and IT professionals who need fast, isolated environments to test installers, updates, or configuration changes without affecting the host.
3. Privacy-conscious users who want to separate browsing data, caches, and cookies from their primary user profile.