# Full Sandbox egress firewall now available on Hobby plan

**Published:** August 5, 2026 | **Authors:** Brandon Tuttle | **Contributors:** Kevin Corbett

---

All [Vercel Sandbox](https://vercel.com/docs/sandbox) firewall features are now available on the Hobby plan.

This brings the same network isolation that protects production workloads to the free tier, giving Hobby builders control over exactly what leaves the sandbox while keeping secrets out of the code entirely. Because the firewall attaches secrets to outbound requests itself, sandboxed code can call authenticated services like [AI Gateway](https://vercel.com/ai-gateway) without ever seeing the token.

Define `allow-all`, `deny-all`, or custom network policies with domain and IP-based rules, using matchers to scope each rule by path, method, query string, or headers. Custom policies can safely broker credentials or proxy requests through infrastructure you control. To get started, pass a `networkPolicy` when you create a sandbox.

**sandbox.ts**
```typescript
import { Sandbox } from '@vercel/sandbox';
const sandbox = await Sandbox.create({
  networkPolicy: {
    allow: {
      "ai-gateway.vercel.sh": [{
        transform: [{
          headers: {
            "Authorization": `Bearer ${process.env.AI_GATEWAY_TOKEN}`
          }
        }],
      }],
      "*": []
    }
  }
});
```

The [Sandbox CLI](https://vercel.com/docs/sandbox/cli-reference) manages the same policies, letting you update them live without restarting the sandbox.

```bash
# Create a sandbox whose egress is limited to Vercel AI Gateway
sandbox create --name my-sandbox --allowed-domain ai-gateway.vercel.sh

# Update the policy live, without restarting the sandbox
sandbox config network-policy my-sandbox --network-policy deny-all
```

Network policies reduce data exfiltration risk when running untrusted or AI-generated code. Learn more in the [Sandbox firewall documentation](https://vercel.com/docs/sandbox/concepts/firewall).

---

📚 **More updates:** [View all changelog entries](/changelog/sitemap.md) | [Blog](/blog/sitemap.md)