Sandstorm is a Y Combinator-backed (2014) open-source self-hosted web app platform from the US that isolates apps with grain sandboxes and capability security, claiming to eliminate about 95% of common vulnerabilities, though commercial maintenance ended in 2020.
