Vercel Security Dashboard Now Generally Available on All Plans

Vercel Security Dashboard is now generally available (GA) on all plans, allowing users to manage the security posture of all accounts and projects in one place. It can be accessed via the UI or by running the vercel security check command in the Vercel CLI.

To address the accumulation of minor configuration errors as teams grow and coding agents accelerate project creation, the dashboard automatically identifies the following security issues:

• Team members without 2FA enabled
• Long-lived credentials that can be replaced with OIDC
• Publicly exposed preview deployments
• Non-sensitive or outdated environment variables

The Security Dashboard UI displays issues in order of risk severity, with each item linking directly to the page where the corresponding setting can be modified. Items that create unnecessary noise for a team can be muted, and all results can be exported to a CSV file for triage or reporting purposes.

The Security Dashboard CLI allows the same checks to be performed from the terminal, which is useful for agents to resolve issues. Using vercel security check --findings enables agents to read failed items, apply fixes, and re-verify. Fixes that agents can apply include enabling Git fork protection, specifying environment variable sensitivity, and replacing static credentials with OIDC integration. The --project flag can be used to narrow the scope to a specific project. In CI and non-interactive environments, the command automatically writes a JSON-formatted report to standard output (stdout), allowing agents to receive structured output.