Control
You stay behind the wheel.
Live only with your okay
Your agent asks before it publishes. A site only goes live on a domain you have verified.
Important things only in the dashboard
Deleting projects and connecting domains only happens there. Nothing irreversible through the chat.
No passwords in the chat
Credentials and API keys never go to VORREN through your agent.
What your agent may do
Clear limits for your agent.
| Action | Your agent | Only you in the dashboard |
|---|---|---|
| Build, check, show a preview | yes | – |
| Publish a version | yes, after your okay | also possible |
| Roll back to an earlier version | yes | also possible |
| Connect or disconnect your own domain | no | yes |
| Delete a project | no | yes |
| Passwords and API keys | never | for backends, only here |
Protection
What VORREN secures for you.
Sign-in through the browser
Your agent signs in with OAuth. Access expires after an hour, is renewed and only applies to VORREN. No tokens to copy.
Connections at a glance
In the dashboard you see every connected agent, since when and when it was last used. One click disconnects it.
Separate projects
Each connection sees only the projects of your account. Other people’s projects are invisible to your agent.
Two-factor
Protect your account further with a second factor from your authenticator app.
Log
Every action with an effect is in the project’s log: which agent, what, when, with what result. Not the contents of your files.
Every project isolated
Static sites are served by a web server built from templates. An app runs on its own, with its own database and behind the VORREN Guard.
VORREN Guard
Every app has its own guard.
The VORREN Guard sits in front of every app with a database. It decides where your app may open connections and only lets through what it really needs. You don’t have to configure anything.
Your app
wants to open a connection
VORREN Guard
- Services on the internet, encryptedallowed
- Its own databaseallowed
- Other projects and their databasesblocked
- VORREN’s own systemsblocked
- Everything elseblocked
Only the path your app needs
Your app reaches internet services over encrypted connections, for example for payments or email, plus its own database. The Guard blocks everything else.
Neighbors stay invisible
Other projects, their databases and VORREN’s own systems are out of your app’s reach, even if someone takes over its code.
Closed rather than open
If the Guard can’t set its rules, your app doesn’t start at all. It never runs unprotected.
Extra shielding
Every app runs in its own, additionally shielded environment, without admin rights. Its program is read-only and can’t be changed at runtime.
Fixed limits
Memory, CPU time and number of processes are limited per app. An app that hangs or is under attack doesn’t slow down any other.
Building without internet
When your site is built, the code runs without network access and without admin rights. Packages only come from the public npm registry.
Every day
The daily security cycle.
New vulnerabilities become known every day. Every day, VORREN checks whether one of them affects something running on VORREN, and closes it wherever it can do so itself.
- 1At night
Update packages
If a package of your site has a known vulnerability and there is a safe version that needs no rework, VORREN upgrades it itself. It only goes live once the preview is built and your site looks the same.
- 2At night
Scan the server
A scanner checks everything that runs on the server: every site, every app, VORREN’s services and the operating system.
- 3At night
Rebuild
If an update of the base closes a vulnerability, VORREN rebuilds the affected sites with the same files. Preview first, then live.
- 4In the morning
Check against vulnerability databases
VORREN compares every version in use with public vulnerability databases, including the list of vulnerabilities that are already being exploited.
What you notice
Usually nothing. If VORREN has updated packages of your site, it shows in the dashboard on your project, and next time your agent learns which files have changed. If an update doesn’t work, your previous version stays online.
When it’s urgent
If a vulnerability is critical or already being exploited, the check reports it to us right away and on its own, not just in the daily summary.
Against abuse
So all sites stay safe.
Many sites share VORREN’s servers. That’s why a few rules apply to everyone.
Proof for domains
Only someone who can set a record in a domain’s DNS zone can connect it. That way nobody can take over someone else’s domain.
Check before every version
VORREN detects API keys in files and rejects them. Sites with password or card fields get an additional check.
Blocking for abuse
Anyone who uses VORREN for phishing or illegal content is blocked, along with their sites. We take reports through a dedicated form.
Hosted in Germany
Where your data is stored.
Everything VORREN stores is in Germany. Your site visitors’ data is covered by the Data Processing Agreement (DPA), which you conclude when you sign up and can view in the dashboard at any time.
| What | Where | Provider |
|---|---|---|
| Your sites, versions and media | Falkenstein, Saxony | Hetzner (VORREN’s server) |
| Account, logs, access logs | Falkenstein, Saxony | Hetzner (VORREN’s server) |
| Nightly backups, booked backups of app databases | Frankfurt am Main | AWS (S3 storage) |
| Emails to you, for example about sign-in, billing or a block | Frankfurt am Main | AWS (SES email sending) |
| What you discuss with your agent | with your agent’s provider | e.g. Anthropic or OpenAI, under their rules |
Privacy
What data VORREN stores.
Your account
Email address and password (only as a hash), and the second factor if you set one up.
Logs
Which connection triggered what and when, with the result. No contents of your files.
Versions of your site
The files of every version you build as a preview, so you can jump back.
Visits to your site
As with any host, access logs are created. You are responsible for your visitors’ data; VORREN processes it on your behalf.
Report illegal content
Found phishing, malware or other illegal content on a site that runs on VORREN? Report it through our report form or write to abuse@vorren.de with the address of the site. We review every report.
Who is behind it
A provider with a name and an address.
VORREN is a service of Think Internet Operations GmbH. We run our clients’ websites on our own servers, and with VORREN we make that know-how available to everyone who builds with AI.
- Provider
- Think Internet Operations GmbH
Eiswerderstr. 16, Gebäude 127, 13585 Berlin - Managing director
- Tim Haag
- Contact
- hallo@vorren.de
- Reports
- You report illegal content through our form or to abuse@vorren.de.
Your next site is one conversation away.
Create an account, connect your agent, start building. Your first project is free; you only pay when you want more or go live.
Want to read up first? Our guides show how it works.