TLDR Tech / InfoSec
Introducing deepsec: The security harness for finding vulnerabilities in your codebase
Vercel open-sourced deepsec, a coding-agent-driven security harness that runs locally (or fans out to 1,000+ Vercel Sandboxes for parallelism) and chains scan → investigate → revalidate → enrich → export to surface vulnerabilities in large codebases, using Claude Opus 4.7 at max effort and GPT-5.5 at xhigh reasoning via existing Claude or Codex subscriptions. The workflow starts with regex-based static analysis to flag security-sensitive files, then agents trace data flows and check mitigations, with a second-pass revalidate step to cull false positives (Vercel reports a 10–20% FP rate) and a plugin system for custom regex matchers tuned to a team's auth model or data layer. Best suited for applications and services rather than libraries.
Read the full story