telexed ~ c / 0cfbfb8e-ba2radar:70 · agent_toolLIVE
TELEXED
← back
NO.
#0cfbfb8e
Topic
AGENTS & TOOLS
Source
vercel_blog
Published
2026-05-04 04:00:00
Importance
★ 7/10 — radar 70
Original
vercel.com/blog/introducing-deepsec-find-and-fix-vulnerabilities-in-your-code-base
`deepsec`: open-source agent security scanner for large codebases
FIG-4121:1

`deepsec`: open-source agent security scanner for large codebases

It starts with static analysis, then sends coding agents to trace risky flows and revalidate findings. Runs locally with your existing Claude or Codex access, so app teams can add deep security review without buying another platform.

[ KEY POINTS ]
  1. Local-first setup matters: privileged code can stay on your laptop, and inference reuses existing Claude or Codex subscriptions.
  2. Scale is the differentiator: single-machine scans can take days, but optional Vercel Sandbox fanout reaches 1,000+ concurrent workers.
  3. The workflow is practical: static analysis narrows targets, agents inspect auth and data flows, then assign severity and actionable fixes.
  4. False positives are not trivial at 10-20%, so the built-in revalidate step is doing real product work, not garnish.
  5. Best fit is apps and services with auth, DBs, and backend logic; libraries likely need custom prompts and scanner plugins.
Originalvercel.com/blog/introducing-deepsec-find-and-fix-vulnerabilities-in-your-code-baseRead original →

// related