Vercel Launches Security Review in Public Beta for GitHub Repositories

• Vercel Security Review launches in public beta, scanning code for vulnerabilities on every push to connected GitHub repositories.
• The feature identifies logic flaws like missing authorization checks and exposed secrets by analyzing the diff and surrounding code, finishing in seconds.
• Findings appear as GitHub PR comments and in the Security dashboard, with options to fix issues via Vercel Agent or external coding agents using the CLI.
• Security reviews are free until November 10, 2026; after that, they are billed at the Vercel Agent rate plus $0.25 per million tokens.

How It Works

• Triggered by GitHub push events, including direct pushes to production branches, with monorepo reviews scoped to the project's root directory.
• The agent traces how changed code is reached and checks for existing protections, applying team-specific security policies written in plain language.
• Findings are tracked against previous reports to avoid duplicates and are marked as resolved when subsequent reviews no longer detect the issue.

Availability and Pricing

• Available today for Pro and Enterprise teams, enabled via Vercel Agent Settings.
• Future plans include support for deployments from Vercel CLI and v0, as well as repositories that do not deploy on Vercel.