{"slug": "full-sandbox-egress-firewall-now-available-on-hobby-plan", "title": "Full Sandbox egress firewall now available on Hobby plan", "summary": "Vercel has made all Sandbox firewall features available on its free Hobby plan, enabling developers to control outbound network traffic with allow-all, deny-all, or custom policies based on domain, IP, path, method, query string, or headers. The firewall attaches secrets to outbound requests, allowing sandboxed code to call authenticated services like AI Gateway without exposing tokens. This update reduces data exfiltration risk when running untrusted or AI-generated code.", "body_md": "All [Vercel Sandbox](https://vercel.com/docs/sandbox) firewall features are now available on the Hobby plan.\n\nThis brings the same network isolation that protects production workloads to the free tier, giving Hobby builders control over exactly what leaves the sandbox while keeping secrets out of the code entirely. Because the firewall attaches secrets to outbound requests itself, sandboxed code can call authenticated services like [AI Gateway](https://vercel.com/ai-gateway) without ever seeing the token.\n\nDefine `allow-all`\n\n, `deny-all`\n\n, or custom network policies with domain and IP-based rules, using matchers to scope each rule by path, method, query string, or headers. Custom policies can safely broker credentials or proxy requests through infrastructure you control. To get started, pass a `networkPolicy`\n\nwhen you create a sandbox.\n\nThe [Sandbox CLI](https://vercel.com/docs/sandbox/cli-reference) manages the same policies, letting you update them live without restarting the sandbox.\n\nNetwork policies reduce data exfiltration risk when running untrusted or AI-generated code. Learn more in the [Sandbox firewall documentation](https://vercel.com/docs/sandbox/concepts/firewall).", "url": "https://wpnews.pro/news/full-sandbox-egress-firewall-now-available-on-hobby-plan", "canonical_source": "https://vercel.com/changelog/full-sandbox-egress-firewall-now-available-on-hobby-plan", "published_at": "2026-08-05 00:00:00+00:00", "updated_at": "2026-08-05 15:59:04.221733+00:00", "lang": "en", "topics": ["ai-safety", "developer-tools"], "entities": ["Vercel", "Vercel Sandbox", "AI Gateway", "Sandbox CLI"], "alternates": {"html": "https://wpnews.pro/news/full-sandbox-egress-firewall-now-available-on-hobby-plan", "markdown": "https://wpnews.pro/news/full-sandbox-egress-firewall-now-available-on-hobby-plan.md", "text": "https://wpnews.pro/news/full-sandbox-egress-firewall-now-available-on-hobby-plan.txt", "jsonld": "https://wpnews.pro/news/full-sandbox-egress-firewall-now-available-on-hobby-plan.jsonld"}}