VulpineOS
Docs
Runtime
Runtime overview
Hardened browser, orchestrator, MCP
Injection filter
Strip invisible DOM before the agent
Action lock
Freeze JS, timers, reflows mid-think
Optimised DOM
93.1% measured token reduction
Operator surfaces
Web panel
Embedded operator console
TUI workbench
SSH-friendly terminal UI
MCP toolbelt
36 typed browser tools
Vulpine-Box
One-container self-host
Ecosystem
Foxbridge
CDP ↔ Juggler / WebDriver BiDi
vulpine-mark
Set-of-Mark visual labelling
mobilebridge
Android device sessions
OpenClaw
Pre-configured agent loop
Documentation
Quickstart
First agent in 30 seconds
Architecture
Four-phase security model
MCP Reference
All 36 browser tools
Agent Scripting DSL
Declarative agent definitions
Open source
VulpineOS Runtime
GitHub, MPL 2.0
Foxbridge
CDP ↔ Juggler / WebDriver BiDi
vulpine-mark
Set-of-Mark visual labelling
mobilebridge
Android device discovery + sessions
Integrations
OpenClaw
Pre-configured agent loop
Camoufox
Anti-detect browser core
LLM providers
30+ models, one toolbelt
Docker (Vulpine-Box)
One-click self-host
Guides
AI Agent Security
Threat model, mitigations
Prevent Prompt Injection
Hidden DOM, ARIA tricks
OpenClaw + Camoufox
End-to-end setup
Camoufox vs Chrome
Why Firefox, why patches
Engineering
Changelog
Release notes as work lands
Roadmap
Now, next, later, research
Blog
Long-form posts on the runtime
RenderLab
Optional render-diagnostics study
Community
Support
How to get help, fast
GitHub Discussions
Ideas, RFCs, support
Contributing
How to help
Security
Responsible disclosure
Star on GitHub →
Research · Vulpine RenderLab

Firefox render diagnostics, with consent.

RenderLab is an optional study that helps improve VulpineOS rendering reliability and fingerprint-consistency research. It is off by default and only runs when you allow it on this page.

Open in desktop Firefox

This study only runs in desktop Firefox or Camoufox. The collector relies on Firefox-specific render output. Open this page in desktop Firefox before allowing diagnostics — the "Allow diagnostics" control below is disabled in other browsers.

01

What we collect

Only browser-render diagnostics. Everything below is gathered locally, summarized across a few repeated passes, and sent in a single small payload to auth.vulpineos.com.

  • Browser and OS metadata

    Browser brand and version, OS name and version, platform, architecture, browser language, timezone, hardware concurrency, and device memory.

  • Display metadata

    Screen width and height, available area, color depth, device pixel ratio, prefers-dark and reduced-motion preferences.

  • Canvas and text rendering summaries

    We render fixed canvas and text scenes locally several times and send hashes plus controlled probe pixel buffers, font metrics, and text-metric measurements. These scenes are generated by this page only; they are not screenshots or page content.

  • WebGL, SVG, audio, and layout summaries

    Vendor and renderer strings, GL and shading language versions, texture and viewport limits, supported extensions, controlled WebGL readback hashes, SVG raster hashes, offline-audio hashes, and DOMRect measurements.

  • Worker capabilities

    Whether your browser exposes Worker, SharedWorker, ServiceWorker, and OffscreenCanvas.

  • Coarse country / region

    If your hosting provider exposes it via request headers, we may store the country or region. We do not store IP addresses.

02

What we do not collect

The following are explicitly out of scope. The collector is built to refuse them.

  • Passwords, tokens, or any credentials.
  • Cookies, localStorage, or sessionStorage contents.
  • Account data or personal identifiers.
  • Browsing history or referrer chains.
  • Page HTML, text content, or any DOM contents.
  • Screenshots, page captures, uploaded images, or images from other sites.
  • Raw data URLs.
03

Why this exists

VulpineOS depends on browser rendering being predictable across operating systems, drivers, and configurations. RenderLab helps us measure how consistent that rendering really is in the wild — across a much wider surface than any single test rig.

The data improves Vulpine RenderLab and our wider work on browser rendering and fingerprint-consistency research. It is not used for advertising, tracking across sites, or training third-party models.

04

Optional, always

RenderLab is opt-in. The site works identically if you decline. Declining saves a local-only flag — nothing is sent to the backend.

Acceptance creates a participant id and consent id which are stored in your browser's localStorage so you can revoke later. A diagnostic is submitted only when you accept. We do not run diagnostics automatically on every visit. If you revoke and later allow diagnostics again, a new consent and diagnostic payload are created.

05

Revoke any time

Use the control at the top of this page. Revocation deletes the local participant and consent ids, and submits a revocation to the backend so we stop accepting runs for them.

06

Contact

Questions or requests: privacy@vulpineos.com.

VulpineOS

The browser built for AI agents.
Open-source runtime, end to end.

Camoufox 146.0.1
Product
RuntimeAction lockOptimised DOMMCP toolbeltVulpine-Box
Ecosystem
Foxbridgevulpine-markmobilebridgeOpenClawCamoufox
Resources
Resources hubRoadmapChangelogBlogDocs
Community
SupportDiscussionsContributingIssuesSecurity
© 2026 VulpineOSBuilt on Camoufox · Firefox 146.0.1TermsPrivacyCookiesAcceptable useSecurity