megachangelog
Announcement

Vercel Security Dashboard is now generally available

The Vercel Security Dashboard is now generally available on all plans, automatically flagging security misconfigurations across accounts and projects with risk-ordered findings and actionable fixes. The dashboard is accessible via the Vercel UI and CLI, with support for muting noise, exporting results to CSV, and agentic remediation through the vercel security check command.

The Vercel Security Dashboard is now generally available on all plans, giving you one place to see your security posture across every account and project.

You can access the Security Dashboard in or run in the Vercel CLI. the UIvercel security check

As teams grow and coding agents make it faster to spin up projects, small misconfigurations add up quietly. The Security Dashboard automatically flags issues like:

Misconfigurations are ordered by risk with the most severe first, and each finding links to the settings that fix them.

Findings that are just noise for your team can also be muted, and all results can be exported to a CSV file for triage or reporting.

You can also run the same checks in your terminal through the command, allowing your agents to work through the findings for you.new Vercel CLIvercel security check

An agent using can read what failed, apply the fix and re-check to confirm. Fixes an agent can apply include:vercel security check --findings

You can also scope the check to one project with when you want a narrow change set.--project

In CI or any other non-interactive environment, the command writes the report to stdout as JSON automatically, giving agents structured output without extra flags.

Get started by running your first scan from the , and learn more in the .Security DashboardSecurity Dashboard documentation

Read more

  • Team members without 2FA

  • Long-lived credentials that can be replaced with OIDC

  • Public preview deployments

  • Non-sensitive and stale environment variables

  • Turning on Git fork protection

  • Marking an environment variable as sensitive

  • Replacing a static credential with OIDC federation

The Security Dashboard UI

The Security Dashboard CLI

securitydashboardcliconfigurationcompliance

Source: original entry ↗