Ctrl+Z Therapy
CasesQuick answersGuides10-minute checklistHow we testCartoonSend it in

Vercel Pro can now review every push for security holes (beta): what it costs

Ship ItChecked against the official source

Source checked 7 Nov 2026 · Published 8 Nov 2026 · Last reviewed 8 Nov 2026 · By Ctrl+Z Therapy (how we test)

The short answer

Since November 3, 2026, Vercel Security Review is in public beta for Pro and Enterprise teams. Once enabled, every push to a connected GitHub repository is automatically reviewed for vulnerabilities. Each finding records the project, environment, branch, and commit, with a summary, a suggested fix, and an AI-generated severity rating. Fix with Vercel Agent opens a pull request, and nothing merges until you approve it.

What to do

  1. Enable Security Review on the Agent settings page and select the projects.
  2. Review findings in the Vulnerabilities dashboard.
  3. Use Fix with Vercel Agent, or copy a finding as Markdown or JSON for your own coding agent.

Good to know

  • Cost: provider inference at the underlying token rate with no markup, plus the Vercel Token Rate of $0.25 per million tokens. Reviews run per Git push, so cost scales with how often you push.
  • Security Review analyzes your code, not your running application. It isn't a security audit.

Source

Checked on 7 Nov 2026. Prices, limits and settings change, so check the source before you rely on them.

Related