diff --git a/modules/wrapper-manager/default.nix b/modules/wrapper-manager/default.nix
index f82f3c02..1bf589f6 100644
--- a/modules/wrapper-manager/default.nix
+++ b/modules/wrapper-manager/default.nix
@@ -2,5 +2,6 @@
   imports = [
     ./programs/blender.nix
     ./programs/zellij.nix
+    ./sandboxing
   ];
 }
diff --git a/modules/wrapper-manager/sandboxing/default.nix b/modules/wrapper-manager/sandboxing/default.nix
new file mode 100644
index 00000000..a300ec3a
--- /dev/null
+++ b/modules/wrapper-manager/sandboxing/default.nix
@@ -0,0 +1,24 @@
+{ lib, ... }:
+
+{
+
+  options.wrappers =
+    let
+      sandboxingType = { name, lib, config, ... }: {
+        options.sandboxing = {
+          variant = lib.mkOption {
+            type = with lib.types; nullOr (enum []);
+            description = ''
+              The sandboxing framework to be applied to the wrapper. A value of
+              `null` will essentially disable it.
+            '';
+            default = null;
+            example = "bubblewrap";
+          };
+        };
+      };
+    in
+    lib.mkOption {
+      type = with lib.types; attrsOf (submodule sandboxingType);
+    };
+}