1. A system for native execution of unsafe code, the system comprising: a host system separated into a user space and a kernel space; at least one VM running in the host system; a Guest OS running on the VM; at least one Guest application executed on the Guest OS; a thin hypervisor implemented on the kernel space within a sandbox; wherein: the thin hypervisor is configured to control execution of the Guest application, the thin hypervisor communicates with the Guest application using a virtualization library; the thin hypervisor is configured to intercept a VMEXIT generated by an unsafe instruction of the Guest application; the thin hypervisor filters the Guest application instructions in order to protect integrity of the host system; the thin hypervisor includes a secure tunnel configured to filter virtual addresses; and the thin hypervisor analyzes requests to modify VMCS fields in order to protect integrity of a host state.