A security mechanism used to constrain the actions a program can take. A sandbox restricts a program to a defined set of privileges and actions that reduce the likelihood that the program may damage the system hosting the program.