Security Playgrounds
Remote sandbox environments for learning and experimentation — without setup or cleanup. Launch fresh Linux VMs, Docker hosts, or Kubernetes clusters in seconds, publish ports, share terminal sessions, and connect over SSH.
Community Collection
Playgrounds contributed by the community members sharing their knowledge and expertise.
OpenClaw on K3s with agent-sandbox + gVisor
A 3-node K3s cluster with gVisor (runsc), the kubernetes-sigs/agent-sandbox controllers, and the OpenClaw + gVisor example pre-deployed. OpenClaw's Control UI is available as a dedicated tab.
OWASP K8s Vulnerable Cluster
This playground presents a k3s cluster that has randomized security vulnerabilities injected based on the OWASP Kubernetes Top 10 list for 2025. Run a scan to find what's wrong, then fix it and get another random vulnerability automatically injected. Play as long as you like!
Kind Cluster: Mutating Admission Policies
A playground to demonstrate dynamic admission control through native support for mutating resources during the admission phase through mutating admission policies.
Kind Cluster: Structured AuthN + AuthZ Config
A playground to demonstrate access control through Kubernetes structured authentication and structured authorization configuration.
Kind Cluster: OIDC AuthN
A playground to demonstrate access control through OIDC authentication for Kubernetes.