Simplified onboarding for deepsec
By Steven Van ·
deepsec, the open-source security review harness from Vercel, now lets you set up a repository and run its first security review with a single command.
Vercel's open-source security review harness, deepsec, can now set up a repository and run its first review with a single command: npx deepsec init.
The command automates the steps that previously had to be done separately: it creates the isolated .deepsec/ workspace (the only thing added to the repository) and installs dependencies, configures model access through the Vercel AI Gateway or a user's own provider keys, generates a description of the codebase and its attack surface for later reviews to use, runs a pattern scan that generates extra scan patterns to cover gaps in the built-in set, and starts the AI review of the flagged files.
Setup is checkpointed after each step, so if a run stops, whether from closing the process, a failed step, or hitting a cost or duration limit, re-running init resumes from the last completed step. See the announcement for details.
