Bitdefender has launched a new VPN designed specifically for AI agents that browse the internet, research information and carry out tasks on behalf of users. The service is intended to separate an AI agent’s online activity from the user’s normal internet connection, helping to prevent websites from seeing the user’s personal IP address.
The Bitdefender VPN for AI Agents entered public beta on 22 September and is initially available for macOS. It works with Claude Desktop, Cursor, Codex and OpenCode, using a Model Context Protocol (MCP) server to provide a separate network connection for supported AI tasks.
A separate connection for every AI task
The service is designed around the growing use of AI agents that can perform actions across websites and applications without requiring users to handle every step themselves. As these systems become more capable of browsing the web and completing multi-stage tasks, their network activity can potentially reveal the IP address associated with the person using them.
Bitdefender’s approach is different from a conventional VPN, which normally routes a device’s internet traffic through a VPN connection. Its new service creates a temporary, isolated connection specifically for an AI agent’s task. The connection starts when the agent calls Bitdefender’s MCP tools and closes when the task finishes.
Each prompt receives its own disposable container, which acts as a temporary digital workspace for the agent. Bitdefender says the container is destroyed after the task, preventing cookies, cache, and other session information from carrying over into a subsequent interaction.
The rest of the computer remains on its normal internet connection while the AI agent uses the VPN. This means a user could continue browsing the web normally while an AI agent conducts separate research through a VPN server. Bitdefender says the approach could help with activities such as researching sensitive subjects, comparing prices between regions, checking geographically specific content, or using an AI agent over public Wi-Fi.
The VPN protects network traffic, not AI conversations
The new service has a specific privacy role rather than providing complete anonymity for AI interactions. Bitdefender says it masks the IP address presented to websites and encrypts the agent’s network traffic, but it does not hide prompts from the AI provider processing them.
This distinction means the service protects the connection between the user’s computer, the VPN and the websites visited by the agent. The AI provider can still receive the prompts and account information associated with the user’s interaction. Bitdefender also warns that only requests routed through its MCP tools are covered. If an AI application uses its own networking tools, those requests may continue through the user’s regular internet connection.
The per-task design also gives the service a different behaviour from a traditional always-on VPN. Each connection is temporary and is discarded when the prompt ends. Bitdefender says there is no automatic fallback to the user’s own IP address if the VPN tunnel fails; the request is instead dropped inside the isolated container. Depending on the circumstances, the agent may retry, abandon the request or ask the user whether to continue without the VPN.
The company also states that the service is not intended to bypass website restrictions, rate limits or IP bans. Its purpose is to change the network path an AI agent uses, not to alter the rules imposed by the website being accessed.
Public beta starts on macOS
Bitdefender VPN for AI Agents is currently available as an external beta for macOS. The company says the beta is free, has no traffic caps, and plans to support additional operating systems. The current release supports Claude Desktop, Cursor, Codex and OpenCode.
The beta requires macOS 13 or later and Apple silicon; it does not support Intel Macs. Bitdefender lists 8GB of memory and around 10GB of free storage as the minimum requirements. The company recommends macOS 15 or later and at least 16GB of memory for testing.
The service is part of a wider effort by Bitdefender to address security and privacy issues created by increasingly autonomous AI systems. The company is also developing AI Guardian, a separate macOS security tool that monitors agent actions, MCP connections, skills, prompts, credentials and file access.
For the VPN, however, the focus remains narrower: keeping an AI agent’s network activity separate from the user’s normal connection. As AI assistants take on more tasks that involve visiting websites and interacting with online services, Bitdefender is positioning per-task network isolation as a way to reduce the personal network information exposed during those activities.
