shipfeedAI news, curated daily

00:33:43 CET
21 MAY00:33:43shipfeed
pull to refreshlast sync
Just in — 30 new
§ feed · storyline

Introducing deepsec: The security harness for finding vulnerabilities in your codebase

Vercel open-sources deepsec, a security scanning harness that uses Claude and Codex agents to surface vulnerabilities in large codebases, with optional parallel execution via Vercel Sandboxes.

May 4 · · primary fetch1 sourceupdated May 4 ·

Today we’re open sourcing : a security harness powered by coding agents. It runs on your own infrastructure and surfaces hard-to-find issues in large codebases. deepsec You can run on your laptop without setting up a cloud service for privileged source code access. For inference, you can use your existing Claude or Codex subscription without any additional setup. deepsec Scanning large repos can take multiple days on a single machine. To run research jobs in parallel, supports optional fanout to Vercel Sandboxes for remote execution. Scans on Vercel’s codebases routinely scale up to 1,000+ concurrent sandboxes.deepsec At its core, uses and to perform tailored investigation of a codebase using Opus 4.7 at max effort and GPT 5.5 at xhigh reasoning.deepsecclaudecodex Scans start with static analysis to identify security-sensitive files, then coding agents investigate each candidate, tracing data flows, checking for mitigations, and producing actionable findings with severity ratings.

Here is the workflow: has been highly useful on our own monorepos and for our customers' codebases. During development, we ran on several open source repositories of Vercel customers and…

read full article on vercel.com
§ sources1 publication · timeline below
  1. vercel.comIntroducing deepsec: The security harness for finding vulnerabilities in your codebaseprimary