Vercel Launches Security Review Beta for Pro and Enterprise Teams

What happened

Vercel has launched Security Review in public beta for Pro and Enterprise teams. The tool is designed to identify vulnerabilities in source code by integrating with GitHub repositories.

Every push to a connected GitHub repository triggers an automatic review for vulnerabilities. Findings from Security Review are reported in the Vulnerabilities dashboard.

Why it matters

The release of Security Review provides developers with a proactive way to detect and address vulnerabilities in their code. By integrating with GitHub, the tool streamlines the process of identifying and resolving security issues.

Key details

Each finding includes details such as the project, environment, branch, and commit, along with a summary, suggested fix, and AI-generated severity rating. Security Review adds a dedicated GitHub check to each commit it reviews.

Findings are posted as review comments on pull requests, linking back to each specific finding. On public repositories, finding details are only accessible through the dashboard.