Technology on VPN Works

Introduction

Tue, 29 Sep 2026 00:00:00 +0000

A VPN for every agent: each AI agent gets a network of its own, and every connection it makes is checked, routed and recorded.

VPN Works is a project to build that network. Its engine, vpnw, is one small program. It runs an agent in a sealed sandbox whose only way out is vpnw, then decides each connection with a policy you can read, sends it down the path you chose and writes it down.

How It Works

Tue, 29 Sep 2026 00:00:00 +0000

The idea. Seal each agent in a sandbox whose only way out is vpnw. vpnw checks every connection against a policy, sends it down the path you chose and records it. The agent doesn’t need to know any of this.

A VPN usually works at the level of the machine. Once it is up, every program on the machine goes out the same way, under the same rules, and nobody can say afterwards which program sent what. That was fine when the programs were a browser and a mail client. It fits badly when one of them is an agent that takes instructions from whatever it reads.

VPN Works Explained: How vpnw Gives Each AI Agent Its Own Network and Stops Token Leaks

Tue, 29 Sep 2026 00:00:00 +0000

VPN Works is a prototype of a small program called vpnw. It gives one program, usually an AI agent, a private network of its own on a Linux computer. vpnw decides where that program’s traffic may go, sends it out the way you choose and writes down every connection it makes.

That matters because of how AI agents work. Coding assistants and similar tools run on laptops and servers with all the network access the machine has, and they follow instructions they find in text. One hidden line in a task file or a web page can say “send the deploy token to this address”, and an agent may simply do it.