← Back to glossary

Isolation of code execution with constrained privileges.

Definition

Sandboxing uses OS and runtime isolation to restrict process capabilities (file, network, system calls), limiting impact of exploitation and reducing lateral access.

In plain English Isolation of code execution with constrained privileges.

Why this matters

Why it matters: It contains compromises and reduces data exposure if a component is exploited.

Example

Example: Browser renderer sandbox preventing direct access to the file system.