SecurityCAN I VIBECODE
NordVPN?
BUILD FIRST
- A non-sensitive or read-only version of the core experience
- A manual review step wherever correctness or trust matters
- A narrow companion tool that removes a real piece of work
LEAVE FOR LATER
- Regulated decisions, payments, or irreversible actions
- Claims of correctness, compliance, or uptime that the MVP cannot support
- Sensitive integrations until security, support, and auditability are ready
RESEARCH NOTES
What this tool actually does.
NordVPN is a commercial consumer VPN and digital-security service operated by Nord Security, available as native apps for Windows, macOS, iOS, Android, Linux, plus browser extensions. Core workflow: the user logs in, picks one of 224+ server locations, and routes traffic through an encrypted tunnel using NordLynx (WireGuard-based with double NAT), NordWhisper, OpenVPN, or IKEv2/IPsec. Bundled features include AES-256 encryption, automatic Kill Switch, split tunneling, Double VPN, Onion Over VPN, obfuscated servers, private DNS, DNS leak protection, Meshnet (encrypted peer-to-peer device network for file sharing and LAN play), Threat Protection (malware/scam/ad blocking), Dark Web Monitor alerts when personal data appears in leaks, dedicated/static-IP servers with port forwarding, SmartPlay for streaming, call-ID scam protection on Android, and MFA. It supports up to 10 devices per accoun
RESEARCHED BUILD PROMPT
Give this to your coding agent.
Build a local desktop demo app that recreates the essential NordVPN workflow without copying it: a user opens the app, chooses a server location, connects, and watches status (connecting / connected / disconnected), session elapsed time, virtual IP, data transferred, and a kill-switch flag that trips when the simulated tunnel drops. Include pre-connect checks (kill switch armed, protocol chosen), a split-tunnel-style list of apps with per-app VPN toggles, and a Threat Protection toggle that logs blocked domains. Do not copy the NordVPN brand, logo, color scheme, layout, or any proprietary assets — design your own UI. User-facing requirements: searchable/favoritable location list with country and server load, one-click connect, protocol selector (NordLynx/WireGuard, OpenVPN, Auto), settings for kill switch and auto-connect, and an event log. Technical requirements: a state store, a mocked server catalog, an async connection state machine that handles slow/failed connects, and a pluggable 'engine' interface so a real WireGuard or OpenVPN backend could be swapped in later — for this build, simulate the tunnel locally (no real traffic routing). Implementation approach: Tauri or Electron with React/Vue and TypeScript, JSON or SQLite storage, and unit tests for the state machine. Out of scope: real tunneling or encryption, a server fleet, billing/subscriptions, account auth, dark web monitoring, a real malware engine, mobile apps, browser extensions, and any NordVPN branding or APIs. Deliver a README with setup/run instructions and important limitations (simulated tunnel, no real privacy guarantees, mock data).