deepsec, the open-source security review harness from Vercel, now lets you set up a repository and run its first security review with a single command.
The init
command now automates the standard setup process:
creates the isolated .deepsec/
workspace, the only thing added to your repository, and installs its dependencies
configures model access, through Vercel AI Gateway or your own provider keys generates a description of the codebase and its attack surface that every later review depends on
runs a pattern scan, generating extra scan patterns where the built-in set leaves coverage gaps
starts the AI review of the flagged files
Setup is checkpointed after each step. If a run stops, whether from closing the process, a failed step, or a hit cost or duration limit, re-running init
resumes from the last completed step.
Run npx deepsec init
to start your first scan, or read the docs to learn more.