Bromure

Secure, ephemeral computing in disposable Linux VMs on macOS.

→ Full details, screenshots, and downloads at bromure.io

---

This repo ships two sibling apps, both built on Apple's [Virtualization.framework](https://developer.apple.com/documentation/virtualization):

• Bromure — every browser session runs in a throwaway Linux VM. Close the window, the VM is destroyed.
• Bromure Agentic Coding — a sandboxed environment for AI coding agents (Claude Code, Codex). A host-side MITM proxy swaps fake credentials for real ones on the wire so secrets never enter the VM, then adds supply-chain scanning, prompt-injection detection, a multi-model panel, local/hybrid inference, and remote access — all enforced at that one boundary.

How Bromure Agentic Coding compares

Isolation, keeping secrets out of the agent, scoping their use, scanning the supply chain, catching prompt injection: most tools pick one. Bromure does all five at a single boundary, then adds what a secret-broker never could: a model panel, local inference, and a way in from anywhere. Here is the same threat model run across the tools people reach for, and where each one stops.

A more detailed feature matrix is available at [bromure.io/en/feature-matrix](https://bromure.io/en/feature-matrix).

| Protection | Dev Container
VS Code | nono
kernel sandbox | agent-vault
octokraft | Agent Vault
Infisical | Docker Sandboxes
microVM | Capsem
air-gapped VM | **Bromure**
Agentic Coding | | --- | --- | --- | --- | --- | --- |