Running programs in isolation or VM's

Hi, I would like to know if there is a way to sandbox/isolate programs, for system security? I know in Debian, Firetools can be used, and on Qubes the programs run in there own VM's.