---
description: Run AI coding agents in hardened containers with allowlist-based network filtering. Local only, no cloud, no accounts.
hide:
  - navigation
  - toc
---

<section class="vp-landing">
  <div class="vp-landing__copy">
    <p class="vp-landing__eyebrow">Secure Agent Sandbox</p>
    <h1>Run AI coding agents in isolated containers</h1>
    <p class="vp-landing__lead">
      Prompt injection, rogue skills, and compromised dependencies can turn
      AI coding agents hostile. Vibepit runs agents in hardened containers
      where all network traffic is filtered through an allowlist. Local
      only: no cloud, no accounts.
    </p>
    <div class="vp-landing__actions">
      <a class="md-button md-button--primary" href="tutorials/first-sandbox/">Get Started</a>
      <a class="md-button" href="reference/cli/">CLI Reference</a>
      <a class="md-button" href="https://github.com/bernd/vibepit">GitHub</a>
    </div>
  </div>
  <div class="vp-landing__panel">
    <img class="vp-landing__logo" src="assets/logo.png" alt="Vibepit logo">
  </div>
  <div class="vp-landing__install-wide">
    <p class="vp-landing__install-label">Quickstart</p>
    <pre class="vp-landing__install"><code>curl -fsSL https://vibepit.dev/download.sh | bash
mv vibepit "$HOME/.local/bin/"</code></pre>
  </div>
</section>

<h2 class="vp-home-section-title">Why Vibepit</h2>

<section class="vp-cards vp-cards--features">
  <article class="vp-card">
    <h3>Container Isolation</h3>
    <p>Each session runs in a hardened container with a read-only root filesystem and dropped capabilities.</p>
  </article>
  <article class="vp-card">
    <h3>Filtered Networking</h3>
    <p>HTTP, HTTPS, and DNS traffic is filtered through an allowlist proxy with optional network presets.</p>
  </article>
  <article class="vp-card">
    <h3>Runtime Control</h3>
    <p>Manage allowlists and inspect live traffic with CLI commands or the interactive monitor UI.</p>
  </article>
</section>

<h2 class="vp-home-section-title">Start Here</h2>

<section class="vp-cards vp-cards--guides">
  <article class="vp-card">
    <h3><a href="tutorials/first-sandbox/">First Sandbox</a></h3>
    <p>Launch your first isolated session in a project directory.</p>
  </article>
  <article class="vp-card">
    <h3><a href="how-to/allowlist-and-monitor/">Monitor and Allowlist</a></h3>
    <p>Inspect proxy logs and manage live session access.</p>
  </article>
  <article class="vp-card">
    <h3><a href="reference/cli/">CLI Reference</a></h3>
    <p>Command syntax, flags, and detailed behavior for every subcommand.</p>
  </article>
  <article class="vp-card">
    <h3><a href="how-to/ai-coding-agents/">AI Coding Agents</a></h3>
    <p>Set up Claude Code, Codex, or Copilot with the right network presets.</p>
  </article>
  <article class="vp-card">
    <h3><a href="explanations/architecture/">Architecture</a></h3>
    <p>How the proxy, sandbox container, and isolated network fit together.</p>
  </article>
  <article class="vp-card">
    <h3><a href="explanations/security-model/">Security Model</a></h3>
    <p>Understand assumptions, boundaries, and defense-in-depth controls.</p>
  </article>
</section>
