Vercel Checks New Code for Security Problems

Vercel has opened Security Review for Pro and Enterprise teams to try. The tool looks for security problems when teams send code to GitHub. Code is the set of instructions that makes an app work. Teams must turn the tool on and connect their projects first. It then checks each new change sent to those projects.

The tool also checks changes sent straight to the live app's code. It does not only check changes waiting for someone to accept them. When it finds a problem, it records where the change happened. It gives a short explanation, a possible fix, and an AI risk score. Teams can see these results in Vercel's list of security findings.

People can ask Vercel Agent to suggest a fix for a finding. The agent opens a request showing the changes for someone to check. Nothing joins the project until a person says the change is acceptable. Teams can also give the finding to another coding tool. They can write their own security rules in everyday language for added context.

Security Review reads the code, but it does not test the running app. It cannot promise that the app has no security problems. Security checks are free until November 10, 2026, but agent fixes cost money. After the free period, more changes and more checks affect the cost. The tool helps teams find problems while people still review the results.