nFOX Lab Launches AI Management Platform and Plans Open-Source Blockhouse Sandbox

Blockhouse removes privileges by default and lets administrators restore access deliberately through policies enforced at the Linux kernel level. The company’s approach borrows from zero-trust security principles by sharply limiting access and letting administrators restore privileges selectively. "Every model has the potential to be hostile," said Gordon Allott, nFOX’s founder and chief executive. "We just presume hostility."

The design addresses a dilemma for companies that want AI capabilities but hesitate to send sensitive information to external providers. Running models internally gives enterprises control over their data, but it also makes them responsible for securing the software and infrastructure that support those models.

Blockhouse operates beneath the application layer, using Linux security mechanisms to restrict model workloads. Rather than relying on instructions telling a model what it should avoid, the system removes capabilities that could enable unauthorized activity, according to Allott. "You’re basically removing the ability to do it in the first place," he said.

Communications pass through Porthole, a monitored channel that allows requests to be reviewed before they are fulfilled. Runtime credentials and audit controls remain outside the model process. Administrators can restrict access to files and approve the destinations workloads may contact using a whitelist. Allott acknowledged that an administrator could mistakenly authorize a malicious destination, a risk the approach does not eliminate.

Blockhouse also checks model integrity. Approved files are sealed with SHA-256 hashes before serving, and built-in checks halt serving if those files change. The software records containment events and reports when a host can’t provide the expected protection.

The sandbox supports the vLLM, SGLang and llama.cpp inference engines. The accompanying nFOX Platform provides a console for evaluating, deploying and monitoring models across cloud virtual machines, rented graphics processing unit hosts and on-premises Linux servers equipped with Nvidia Corp. GPUs. Teams can check model configurations, verify files and test models with adversarial prompts before deployment. Production workloads receive OpenAI Group PLC-compatible endpoints, while operational evidence can feed existing endpoint detection and security information management systems. Audit records use JavaScript Object Notation and Parquet formats.

Allott said nFOX plans to release Blockhouse under the Apache 2.0 license, while charging an annual license for its fleet management platform. He said open-sourcing the sandbox invites the public scrutiny that security software needs. "The best security comes from many, many eyes and smart people working on it," he said. Allott pointed to Nvidia’s OpenShell as a similar technology focused on securing agents and said nFOX intends to incorporate it. The startup’s roadmap has it expanding into agent protection over time.

The startup is self-funded but intends to raise venture capital. Allott said nFox has paying beta pilot customers, though it is not yet profitable. The nFOX Platform is available now. Blockhouse is available in beta test for qualified enterprise evaluations. The commercial platform adds deployment and oversight to the open-source sandbox, with both components focused on keeping privately operated AI under enterprise control.

Editor's Summary nFOX Lab has launched a commercial platform for managing private large language models and plans to open-source its Blockhouse security sandbox. The sandbox removes AI workload privileges by default and enforces controls at the Linux kernel level, while the paid platform adds deployment and monitoring. The company says the approach aims to let enterprises run open models on their own infrastructure with more limited security exposure.