about
Why the Project Is Called VPN Works When It Isn't Another VPN App
VPN Works is the name of an operating system for network paths: the VPN, rebuilt as an OS. It isn’t a VPN app. There’s no server list, no country picker and …
Posts
case studies
DNS Leak Case Study: A Stand-In VPN Client Sends 81 Queries to the Home Router While It Reconnects
A stand-in VPN client sent 81 DNS queries to the home router while it reconnected, every one outside the tunnel. Lab caught it in VPN Works 0.2.0. VPN Works now runs …
case studies
Fixed Exit Case Study: A Stolen Agent Token Reaches Nothing Its Policy Refuses, Even Sent Straight to the Exit
An attacker steals an agent’s token and sends requests straight to the exit, skipping the agent’s machine. Exit checked each one against the agent’s own …
case studies
Tampered Log Case Study: 12 of 12 Edits to an AI Agent's Sealed Record Caught at the Exact Line
Someone edits an AI agent’s connection record to hide where it sent data. Ledger caught 12 of 12 such edits at the exact line, in VPN Works 0.2.0. It’s back …
case studies
Stolen VPN Login Case Study: Rules Learned From Two Weeks of Traffic Stop 136 of 144 Attempts
Someone logs in to a company VPN as Alice from finance, with her stolen password, and tries 12 internal systems on 12 common ports. On a flat VPN all 144 attempts get …
roadmap
The Next VPN Works Prototypes: A 14-Week Beta for AI Agents and a Real Gateway Pilot for Scope
On October 1, 2026, the plan was a 14-week Beta for AI agents and a gateway pilot for Scope. A week later the project took a different turn: it rebuilt VPN Works as one …
technology
VPN Works Explained: How vpnw Gives Each AI Agent Its Own Network, and How Scope Narrows the Company VPN
vpnw gives a program a sealed room with one door. The door checks a short list of where the program may go, sends it out the way you picked, and writes everything down. …
business
Where the Money Is in VPN Works: One Policy for Every AI Agent, and Least-Privilege Access on the Company VPN
AI agents need network rules per program, and every agent vendor now ships its own fence that works only for its own agent. One policy and one record across all of them …
case studies
Cloud Metadata Case Study: Request for Instance Credentials Blocked Before Any Connection Is Made
A program asks the cloud’s metadata address for the machine’s credentials, the classic first move after a server-side request forgery. vpnw refuses it before …
case studies
Coding Agent Case Study: Deploy Token Blocked by a Policy Drafted From One Traced Run
A coding agent gets a task file with a hidden instruction to send its deploy token to an attacker. One traced run, a policy drafted from it and read by a person, and the …