Vercel Security Dashboard is now generally available
By Steven Van ·
The Vercel Security Dashboard is now generally available on all plans, giving you one place to see your security posture across every account and project.
The Vercel Security Dashboard is now generally available on all plans, giving one place to see security posture across every account and project. It's available in the UI or via the new vercel security check CLI command.
The dashboard automatically flags issues such as team members without 2FA, long-lived credentials that could use OIDC instead, public preview deployments, and non-sensitive or stale environment variables. Findings are ordered by severity, each one links to the settings that fix it, noise can be muted, and results can be exported to CSV.
The CLI runs the same checks in the terminal, and agents can use vercel security check --findings to read what failed, apply a fix, and re-check to confirm. Fixes an agent can apply include turning on Git fork protection, marking an environment variable as sensitive, and replacing a static credential with OIDC federation. The check can be scoped to one project with --project, and in CI or other non-interactive environments it writes its report to stdout as JSON automatically.
Read the full announcement for more.
