When you setup your guest machine as a private network, it will only be accessible from the host machine. No other machine in your network can reach it. This is probably the safest and most secure usage of a vagrant box

Figure 5.2. Private network configuration