Skip to content
TurnPanel.
PricingDocsSign inDownload

Your download has started

One step before the first open

The Preview isn’t notarised yet: it’s with Apple for review, and they’re taking their time. Until it’s through, macOS blocks it the first time. Clearing that takes a few seconds, once.

  1. Open the downloaded file and drag TurnPanel onto Applications.
  2. Open Terminal and run this:
    Terminal
    $ xattr -dr com.apple.quarantine /Applications/TurnPanel.app
  3. Open TurnPanel from Applications as usual.

Rather not use Terminal? Try to open TurnPanel once, then go to System Settings, Privacy & Security, and choose Open Anyway.

DocumentationSecurity and privacy

Run it

Security and privacy

How the sandbox, secrets, the network policy and the audit log keep agents contained, and what leaves your machine.

Updated 2026-10-29View as Markdown

The sandbox

Each regular space is its own virtual machine with its own network. Agents run there as the person's own user, not as an administrator. They see only the folders you shared, and one space cannot reach another.

Computer and local spaces are the exception. They run directly on the machine, are for admins only, and say so with a banner and a marker on every job in them.

Secrets and how they reach tools

A secret is a key or password you give TurnPanel to use for you. Secrets are write-only: after you save one, nothing shows its value again, only its name, owner, how it is delivered and when it was last used. They are encrypted, and they are removed from job transcripts, logs and the audit log. A memory or skill that contains one is refused.

When you create a secret, you choose how it reaches a program.

  • Proxy (best for web APIs). The program gets a harmless placeholder, and TurnPanel swaps in the real value only on requests to the hosts you bound it to. A placeholder sent anywhere else is blocked and logged.
  • Environment variable. The value is in the memory of the processes that start with it. The secret's page says plainly that code in the space can read it.
  • File. Written for the job and removed when it ends.
  • Broker only. Never sent into the space. TurnPanel uses it for its own calls, such as email.

Whose secrets

Secrets can belong to the workspace, a space, or you. Yours stay yours: an admin can delete one but never use it or read it. For the same name, your own wins over the space's, which wins over the workspace's.

Network policy

Everything a space sends out goes through one proxy that records each connection (time, person, host, port, bytes, and whether it was allowed). It does not read the traffic, except to swap in a proxied secret on the hosts that secret is bound to. Choose a policy in a space's settings under Network.

  • Open (the default). Any public site.
  • Allow-list. Only the domains you list.
  • Offline. Nothing outside TurnPanel itself.

Your private network stays private

Spaces cannot reach addresses on your own network, the cloud metadata address or the machine's other services, unless an admin allows a specific one. A space is not a way into your office network.

The audit log

Every action is recorded once, in a log that cannot be edited: sign-ins, approvals, secrets used, tools called, settings changed. Refused actions are recorded too. It holds names and references, never secret values, prompts, answers or file contents. Each entry is chained to the one before, so tampering shows.

Read it in Settings under Audit (owner, admins and auditors), or as the Log tab of a space's Activity. Streaming it to security tools and longer retention come with Enterprise.

Air-gapped mode

For workspaces that must make no outside calls. Turn it on in Settings under Privacy and security, or with TURNPANEL_AIR_GAP=on. Then:

  • Update checks, the account, hosted models, web search, the marketplace, the TurnPanel add-on, the tunnel and telemetry are all off.
  • Online model providers and hosted models are not offered. Use local models.
  • Spaces can reach only TurnPanel itself and hosts on an internal allow list you set, such as a company Git server.
  • Base images and models are imported from files.
  • Turning the mode on or off needs an admin, and the page asks twice. Leaving it must be confirmed.

Telemetry and outside calls

Telemetry is off by default. An admin can turn it on in Settings under Privacy and security, which also shows exactly what would be sent. It is only product events and counts: never prompts, transcripts, file contents, secrets, names, email addresses, queries or URLs. To be sure it stays off, leave it off, or set TURNPANEL_TELEMETRY=off. DO_NOT_TRACK=1 and air-gapped mode always turn it off.

Every other outside call has an off switch too. Update checks stop with TURNPANEL_UPDATE_CHECKS=off. A problem report is sent only when a person chooses to send one. The account, hosted models, web search and the tunnel work only if you connect a TurnPanel account. The marketplace and update checks need no account, and each has its own off switch (TURNPANEL_MARKETPLACE=off, TURNPANEL_UPDATE_CHECKS=off). Telemetry, if you turn it on, needs no account either.