Today, we are launching Vercel Security Review in public beta.

Security Review is a new capability in Vercel Agent , alongside Code Review and Investigation. Once enabled, it scans for vulnerabilities on every push to a team's connected GitHub repositories.

Findings appear as comments on pull requests, are listed in the Security dashboard, and are available via CLI. With your permission, Vercel Agent can also validate and push fixes for findings.

Copy link to heading How it works

Security reviews are triggered by GitHub push events, including direct pushes to your production branch. In monorepos, reviews are scoped to the project's root directory. Here is how it works:

You push code to a GitHub repository connected to a Vercel project.

As soon as the push lands, Security Review scans the changed code for vulnerabilities like missing authorization checks or exposed secrets.

Findings are posted to the Security dashboard.…