Vercel Launches Public Beta of Security Review: AI Automatically Audits Every Code Push
Vercel releases Security Review in public beta, integrating AI-driven vulnerability detection and automated fixes directly into the GitHub push workflow.
US cloud development platform Vercel has announced that its "Security Review" feature is now in public beta for Pro and Enterprise teams. The tool aims to integrate AI-driven security analysis directly into the daily code submission process, rather than serving only as an after-the-fact audit or an add-on check for pull requests.
Unlike traditional scans based on pull requests, Security Review is triggered by push events to connected GitHub repositories. This means that both regular commits and direct force pushes to production branches undergo immediate automated vulnerability review. Each finding records the project, environment, branch, and commit, accompanied by an AI-generated severity rating and a suggested fix.
In the remediation phase, developers can click "Fix with Vercel Agent," allowing Vercel's AI agent to propose a fix and open a pull request for human review, ensuring nothing merges without approval. Additionally, teams can write security policies in plain language to provide context for the AI review.
Vercel explicitly notes the limitations: the tool analyzes source code only, does not perform runtime or penetration testing, and therefore cannot replace a full security audit nor guarantee an application is free of vulnerabilities. Pricing is billed at the Vercel Agent rate, including underlying model inference costs plus a Vercel Token Rate of $0.25 per million tokens. Reviews are free until November 10, 2026, but subsequent usage will incur costs scaling with push frequency and code change volume.