Capsem offers virtual-machine isolation and network inspection for coding agents

Capsem offers an open-source tool that runs each AI coding agent session in a separate Linux virtual machine and checks network requests against policy before forwarding them, according to its project website. The site provides installation instructions and stable-channel packages. The host intercepts encrypted web traffic, inspects requests and responses, and logs their full bodies in a session database. Corporate configuration can lock policy and reporting settings. Each session starts fresh with a read-only root filesystem. The website lists Linux host support as forthcoming while also offering Linux packages and specifying KVM requirements.