Integrated directly into deployment pipelines, the tool evaluates production branches on every direct or force push and attaches checks to commits. Identified issues feature detailed environment and commit data alongside suggested fixes, which Vercel Agent can package into human-approved pull requests. Teams can also write custom security rules in plain language, manage findings via CLI version 65.10.0 or later, and export their vulnerability data to Markdown or JSON.
Key points
The service focuses exclusively on source code analysis and does not perform runtime eval…: The service focuses exclusively on source code analysis and does not perform runtime evaluations, penetration testing, or full security audits.
Automated code repairs routed through Vercel Agent generate pull requests that strictly r…: Automated code repairs routed through Vercel Agent generate pull requests that strictly require human approval before merging.
Security reviews remain free until November 10, 2026, after which usage incurs underlying…: Security reviews remain free until November 10, 2026, after which usage incurs underlying token costs plus a Vercel fee of $0.25 per million tokens.
Sources checked by our analysis pipeline: 1
Vercel Security Review is now in public beta for Pro and Enterprise teams. Once enabled, every push to a connected GitHub repository is automatically reviewed for vulnerabilities, and findings are reported in the Vulnerabilities dashboard.
Copy link to headingWhat triggers a review
Security Review runs automatically when code is pushed to a connected GitHub repository. Because reviews start from push events rather than pull requests, direct and force pushes to your production branch are reviewed as well. Every project affected by a single push is reviewed together.
Copy link to headingWhat a finding includes
Each finding records the project, environment, branch, and commit, with a summary, a suggested fix, and an AI-generated severity rating.
Security Review adds its own GitHub check to each commit it reviews. When there's a pull request, it also posts findings as review comments that link back to each finding. On public repositories, finding details stay in the dashboard.
Copy link to headingFixes and resolution
Clicking Fix with Vercel Agent on a vulnerability report hands the finding to Vercel Agent, which proposes a fix and opens…
The San Jose-based startup earned this regional recognition for leveraging managed real-time data streaming as a foundational pillar of its enterprise Network-as-a-Service platform. By utilizing cloud-native streaming to ingest telemetry directly from edge devices, the company delivers combined observability, governance, and post-quantum security without maintaining its own streaming infrastructure. This framework positions the firm to efficiently scale operations for demanding enterprise clients, including teleco…
Designed to support data-intensive environments like modern factories, energy infrastructure, and AI facilities, the new platform provides a scalable alternative to costly legacy proprietary systems. It simultaneously serves as the data foundation for Inductive Automation's Ignition Enterprise Historian in Ignition 2027, which is also opening for testing. This architecture enables organizations to run resilient time-series workloads under their own control across cloud, on-premises, and edge footprints.
Chief executive Melanie Perkins framed the reorganization as the most challenging chapter in the company's 13-year history, aimed at collapsing internal layers and pushing staff into in-person hubs. The operational overhaul affects nearly a quarter of the global headcount through a mix of redundancies and mandated relocations. This organizational pivot places the design platform alongside other tech peers currently downsizing, though it notably omitted artificial intelligence as a stated justification.