Tags

About1

• Why the Project Is Called VPN Works When It Isn't Another VPN App

Ai Agents4

• VPN Works 0.9.0 Cuts an AI Agent Off at Its Byte Budget and Records Why
• The Next VPN Works Prototypes: A 14-Week Beta for AI Agents and a Real Gateway Pilot for Scope
• VPN Works Explained: How vpnw Gives Each AI Agent Its Own Network, and How Scope Narrows the Company VPN
• Where the Money Is in VPN Works: One Policy for Every AI Agent, and Least-Privilege Access on the Company VPN

Alpha Demo4

• Cloud Metadata Case Study: Request for Instance Credentials Blocked Before Any Connection Is Made
• Coding Agent Case Study: Deploy Token Blocked by a Policy Drafted From One Traced Run
• Office Route Case Study: Ticket Filed Through the Office Exit, With the Deploy Token Still Blocked
• Sealed Sandbox Case Study: A Script That Ignores Proxy Settings Tries Three Ways Out and Finds None

Audit Trails2

• VPN Works 0.5.0: Ledger Seals Each Run's Record and Names the Line Anyone Changed
• Tampered Log Case Study: 12 of 12 Edits to an AI Agent's Sealed Record Caught at the Exact Line

Beta1

• The Next VPN Works Prototypes: A 14-Week Beta for AI Agents and a Real Gateway Pilot for Scope

Budgets1

• VPN Works 0.9.0 Cuts an AI Agent Off at Its Byte Budget and Records Why

Business1

• Where the Money Is in VPN Works: One Policy for Every AI Agent, and Least-Privilege Access on the Company VPN

Case Studies8

• DNS Leak Case Study: A Stand-In VPN Client Sends 81 Queries to the Home Router While It Reconnects
• Fixed Exit Case Study: A Stolen Agent Token Reaches Nothing Its Policy Refuses, Even Sent Straight to the Exit
• Tampered Log Case Study: 12 of 12 Edits to an AI Agent's Sealed Record Caught at the Exact Line
• Stolen VPN Login Case Study: Rules Learned From Two Weeks of Traffic Stop 136 of 144 Attempts
• Cloud Metadata Case Study: Request for Instance Credentials Blocked Before Any Connection Is Made
• Coding Agent Case Study: Deploy Token Blocked by a Policy Drafted From One Traced Run
• Office Route Case Study: Ticket Filed Through the Office Exit, With the Deploy Token Still Blocked
• Sealed Sandbox Case Study: A Script That Ignores Proxy Settings Tries Three Ways Out and Finds None

Cloud Security1

• Cloud Metadata Case Study: Request for Instance Credentials Blocked Before Any Connection Is Made

Coding Agents1

• Coding Agent Case Study: Deploy Token Blocked by a Policy Drafted From One Traced Run

Exit3

• VPN Works 0.9.0 Cuts an AI Agent Off at Its Byte Budget and Records Why
• VPN Works 0.7.0 Adds Exit With Fixed Addresses and a Second Policy Check at the Far End
• Fixed Exit Case Study: A Stolen Agent Token Reaches Nothing Its Policy Refuses, Even Sent Straight to the Exit

Explainer1

• VPN Works Explained: How vpnw Gives Each AI Agent Its Own Network, and How Scope Narrows the Company VPN

Fixed Exits2

• VPN Works 0.7.0 Adds Exit With Fixed Addresses and a Second Policy Check at the Far End
• Fixed Exit Case Study: A Stolen Agent Token Reaches Nothing Its Policy Refuses, Even Sent Straight to the Exit

Guard Plugins1

• VPN Works 0.9.0 Cuts an AI Agent Off at Its Byte Budget and Records Why

Lab2

• VPN Works 0.6.0: Lab Breaks the Tunnel on Purpose, and Four Fixes Come Out of It
• DNS Leak Case Study: A Stand-In VPN Client Sends 81 Queries to the Home Router While It Reconnects

Ledger3

• VPN Works 0.10.0 Signs Every Ledger Checkpoint With a Key No Plugin Can Read
• VPN Works 0.5.0: Ledger Seals Each Run's Record and Names the Line Anyone Changed
• Tampered Log Case Study: 12 of 12 Edits to an AI Agent's Sealed Record Caught at the Exact Line

Next Uses1

• Next Uses: Seven Places Where a Network per Program Could Fit

Office Networks1

• Office Route Case Study: Ticket Filed Through the Office Exit, With the Deploy Token Still Blocked

Plugins5

• VPN Works 0.10.0 Signs Every Ledger Checkpoint With a Key No Plugin Can Read
• VPN Works 0.7.0 Adds Exit With Fixed Addresses and a Second Policy Check at the Far End
• VPN Works 0.8.0 Adds Tunnel Plugins and Rotates Through a Folder of WireGuard Configs
• VPN Works 0.5.0: Ledger Seals Each Run's Record and Names the Line Anyone Changed
• VPN Works Rebuilt as One Core With Plugins: What Moved Where in 0.3.0

Releases9

• VPN Works 0.10.0 Signs Every Ledger Checkpoint With a Key No Plugin Can Read
• VPN Works 0.9.0 Cuts an AI Agent Off at Its Byte Budget and Records Why
• VPN Works 0.7.0 Adds Exit With Fixed Addresses and a Second Policy Check at the Far End
• VPN Works 0.8.0 Adds Tunnel Plugins and Rotates Through a Folder of WireGuard Configs
• VPN Works 0.5.0: Ledger Seals Each Run's Record and Names the Line Anyone Changed
• VPN Works 0.6.0: Lab Breaks the Tunnel on Purpose, and Four Fixes Come Out of It
• VPN Works 0.4.0: WireGuard Tunnels for One Program at a Time, Without Root
• VPN Works 0.4.1: All 17 Ways Out of the Sealed Sandbox Blocked, IPv6 Included
• VPN Works Rebuilt as One Core With Plugins: What Moved Where in 0.3.0

Roadmap5

• The Next VPN Works Prototypes: A 14-Week Beta for AI Agents and a Real Gateway Pilot for Scope
• Where the Money Is in VPN Works: One Policy for Every AI Agent, and Least-Privilege Access on the Company VPN
• How It Works
• Introduction
• Next Uses: Seven Places Where a Network per Program Could Fit

Sandboxing1

• Sealed Sandbox Case Study: A Script That Ignores Proxy Settings Tries Three Ways Out and Finds None

Scope4

• Stolen VPN Login Case Study: Rules Learned From Two Weeks of Traffic Stop 136 of 144 Attempts
• The Next VPN Works Prototypes: A 14-Week Beta for AI Agents and a Real Gateway Pilot for Scope
• VPN Works Explained: How vpnw Gives Each AI Agent Its Own Network, and How Scope Narrows the Company VPN
• Where the Money Is in VPN Works: One Policy for Every AI Agent, and Least-Privilege Access on the Company VPN

Signatures1

• VPN Works 0.10.0 Signs Every Ledger Checkpoint With a Key No Plugin Can Read

Technology8

• How VPN Works 0.4.0 Was Tested: 121 Tests, a Real WireGuard Peer and 14 Ways Out Blocked
• VPN Works 0.4.0: WireGuard Tunnels for One Program at a Time, Without Root
• VPN Works 0.4.1: All 17 Ways Out of the Sealed Sandbox Blocked, IPv6 Included
• VPN Works Rebuilt as One Core With Plugins: What Moved Where in 0.3.0
• Why the Project Is Called VPN Works When It Isn't Another VPN App
• VPN Works Explained: How vpnw Gives Each AI Agent Its Own Network, and How Scope Narrows the Company VPN
• How It Works
• Introduction

Testing3

• VPN Works 0.6.0: Lab Breaks the Tunnel on Purpose, and Four Fixes Come Out of It
• How VPN Works 0.4.0 Was Tested: 121 Tests, a Real WireGuard Peer and 14 Ways Out Blocked
• VPN Works 0.4.1: All 17 Ways Out of the Sealed Sandbox Blocked, IPv6 Included

Tunnel Plugins1

• VPN Works 0.8.0 Adds Tunnel Plugins and Rotates Through a Folder of WireGuard Configs

Vpn Access1

• Stolen VPN Login Case Study: Rules Learned From Two Weeks of Traffic Stop 136 of 144 Attempts

Vpn Leaks1

• DNS Leak Case Study: A Stand-In VPN Client Sends 81 Queries to the Home Router While It Reconnects

Wireguard4

• VPN Works 0.8.0 Adds Tunnel Plugins and Rotates Through a Folder of WireGuard Configs
• VPN Works 0.6.0: Lab Breaks the Tunnel on Purpose, and Four Fixes Come Out of It
• How VPN Works 0.4.0 Was Tested: 121 Tests, a Real WireGuard Peer and 14 Ways Out Blocked
• VPN Works 0.4.0: WireGuard Tunnels for One Program at a Time, Without Root