Vercel launches Security Review in public beta
Vercel announced Security Review, a public beta capability for Pro and Enterprise teams that scans GitHub pushes to connected repositories for vulnerabilities and reports findings as pull request comments, in the Security dashboard, and via the Vercel CLI. Vercel Agent can validate findings and, with permission, push fixes.
Why it matters
Builders shipping on Vercel get automated, diff-scoped security review on every push and deployment, including logic flaws such as missing authorization checks, with findings tracked across preview and production. Security reviews are free until November 10, 2026; afterward they are billed at Vercel Agent rates plus $0.25 per million tokens.
Who should care
Pro and Enterprise Vercel teams, developers shipping with coding agents, security and platform engineers, and teams with monorepos or customer-data endpoints.
What you can do
Enable Security Review in Vercel Agent Settings for the projects you choose, and optionally write a security policy requiring endpoints that return customer data to verify ownership.