megachangelog
Announcement

Vercel Security Dashboard is now generally available

The Vercel Security Dashboard is now generally available on all plans, automatically flagging security misconfigurations across accounts and projects with risk-ordered findings and actionable fixes. The dashboard is accessible via the Vercel UI and CLI, with support for muting noise, exporting results to CSV, and agentic remediation through the vercel security check command.

The Vercel Security Dashboard is now generally available on all plans, giving you one place to see your security posture across every account and project.

You can access the Security Dashboard in or run in the Vercel CLI. the UIvercel security check

As teams grow and coding agents make it faster to spin up projects, small misconfigurations add up quietly. The Security Dashboard automatically flags issues like:

Misconfigurations are ordered by risk with the most severe first, and each finding links to the settings that fix them.

Findings that are just noise for your team can also be muted, and all results can be exported to a CSV file for triage or reporting.

You can also run the same checks in your terminal through the command, allowing your agents to work through the findings for you.new Vercel CLIvercel security check

An agent using can read what failed, apply the fix and re-check to confirm. Fixes an agent can apply include:vercel security check --findings

You can also scope the check to one project with when you want a narrow change set.--project

In CI or any other non-interactive environment, the command writes the report to stdout as JSON automatically, giving agents structured output without extra flags.

Get started by running your first scan from the , and learn more in the .Security DashboardSecurity Dashboard documentation

Read more

  • Team members without 2FA

  • Long-lived credentials that can be replaced with OIDC

  • Public preview deployments

  • Non-sensitive and stale environment variables

  • Turning on Git fork protection

  • Marking an environment variable as sensitive

  • Replacing a static credential with OIDC federation

The Security Dashboard UI

The Security Dashboard CLI

securitydashboardcliconfigurationcompliance

Source: original entry ↗

More from Vercel

Follow Vercel to get its new changes in your feed and email digest.

Announcement

Gemini 4 Argon now available on AI Gateway

Google's Gemini 4 Argon model is now available through Vercel's AI Gateway with support for coding, agentic work, and complex reasoning tasks. The model features a 1M token context window, multimodal input capabilities (text, image, PDF, video), tool calling, and configurable thinking levels for enhanced performance.

ai-gatewaygeminimodelapicoding-agents
Feature

MAI-Image-2.6 and MAI-Image-2.6-Flash now available on AI Gateway

Microsoft's MAI-Image-2.6 and MAI-Image-2.6-Flash models are now available on AI Gateway, enabling image generation and editing through a single API key without requiring separate provider accounts. Both models support photorealistic imagery, text rendering, targeted edits, and up to five reference images with output sizes up to 1536×1536.

ai-gatewayimage-generationapimodels
Improvement

Repository checkout and Git LFS downloads are now faster

Repository checkout and Git LFS downloads are now faster on Vercel, reducing build preparation time. Average checkout time improved by 20%, with LFS-enabled projects seeing a 54% improvement and saving approximately 13 seconds per deployment.

performancegitlfsdeploymentsbuild
See all Vercel changes →