Vercel
Sources: Vercel (homepage) · OSS AI Security Harness Comparison.
Identity and role
Vercel is a frontend cloud and hosting platform company. Semgrep’s July 2026 survey of open-source AI code-security harnesses attributes deepsec to “Vercel Labs,” published under the vercel-labs GitHub organization.
Relevance to This Wiki
deepsec is a SAST+LLM hybrid vulnerability scanner with strong web and application-framework coverage, Next.js and Django named explicitly, plus infrastructure-as-code support, matching Vercel’s own hosting focus.1 Semgrep records the project at about 5K GitHub stars, the second-highest count among the nine projects compared.2 The source’s own two accounts of the project’s licence disagree: the category list states Apache 2.0, while the capability matrix instead reads “see repo,” with a footnote asking readers to confirm the licence directly. See deepsec for the disagreement.
Semgrep recommends deepsec to a Next.js or Vercel shop specifically: cheap regex-first triage, an AI second look, and a --diff mode for pull-request review, at the cost of remaining static-only.
Outputs / Products
- deepsec — regex prefilter, then AI investigation, then revalidation; multi-backend (default Codex GPT-5.5, or Claude Opus 4.8, or Pi); sandboxed locally with bubblewrap or Seatbelt, or via Vercel microVMs for distributed runs.1
See Also
- deepsec — the product covered here.
- OSS AI Security Harness Comparison — source.