v0: vibe coding, securely
Vercel's v0 platform now emphasizes security safeguards for AI-generated code development. As vibe coding accelerates software delivery, the update addresses risks from misconfiguration and insecure defaults by introducing security guardrails to prevent vulnerabilities in rapidly built applications.
Vibe coding has changed how software gets built. Tools like make it possible to turn ideas into working prototypes in seconds. Anthropic's CEO predicts . Adoption is accelerating fast, and for many builders, we're already there.v090% of code will be AI-generated in 3-6 months
But here's the uncomfortable truth: The faster you build, the more risk you create
Last week, a viral app . This wasn’t a hack or advanced malware. It was caused by default settings, misused variables, and the absence of guardrails. A misconfigured Firebase bucket that was mistakenly left public for anyone to access. The app was built quickly, shipped without security review, and went viral.leaked 72k selfies and government IDs
Source: original entry ↗
More from Vercel
Follow Vercel to get its new changes in your feed and email digest.
OpenAI Decisions API now available on AI Gateway
OpenAI's Decisions API is now accessible through Vercel's AI Gateway with an OpenAI-compatible endpoint, enabling decision models to answer typed questions and return probabilities, choices, and scores for routing, triage, and guardrails use cases. Support is available across the OpenAI SDK, AI SDK, HTTP API, and CLI with the latest versions.
Timestamp attributes now supported in Vercel Flags
Vercel Flags now supports timestamp attributes for entities, allowing you to create time-based targeting rules. Use this feature to run limited-time campaigns, show content between specific dates, or target users based on registration date.
Glyph Cluster now available in stealth on AI Gateway
Glyph Cluster, a reasoning model for coding and long-context analysis, is now available as a stealth model on Vercel's AI Gateway for Pro and Enterprise plan teams with purchased AI Gateway credits at no cost during the stealth period. The model supports function calling, streams responses, and can be accessed via AI SDK, OpenAI-compatible APIs, and coding agents.