Systems and methods for Quality of Service (QoS) enforcement and data security for containers accessing storage. An example method may comprise: receiving an input/output (I/O) call initiated by a container running on a host computer system to request data from a storage device; translating the I/O call into a device emulator call to a device emulator emulating a storage device; sending the device emulator call to the device emulator; and receiving, from the device emulator, a response comprising the data retrieved from the storage device.