Vercel Security Review Is Free Until November 10
Vercel Security Review is now in public beta, and security reviews are free until November 10, 2026. Once a Pro or Enterprise team turns it on, every push to a connected GitHub repo gets an automatic vulnerability check.
Free code security reviews until November 10
- Eligible plans：
- Vercel Pro, Enterprise
- Eligibility：
- Vercel Pro or Enterprise teams with projects connected to GitHub
- Benefit duration：
- From now until November 10, 2026, security reviews are free
- Renewal terms：
- After the free window, reviews are billed at the Vercel Agent rate: provider token prices with no markup plus $0.25 per million tokens. Fixes made with Vercel Agent are billed at that rate from day one.
- Claim by:
- 2026-11-10
The briefing
Vercel added Security Review to Vercel Agent and opened it as a public beta. Pro and Enterprise teams can turn it on and get an automatic security review on every push, free until November 10, 2026.
What you can use
Security Review runs whenever you push to a connected GitHub repository, including direct and force pushes to your production branch. It reviews only what changed, reads the surrounding code, traces whether the change is reachable and whether protections already exist, so a review usually finishes in seconds. It catches logic flaws such as missing authorization checks and exposed secrets that pattern-matching scanners tend to miss.
Each finding explains the issue and the fix, links to the commit and deployment where it first appeared, and shows up in the Vulnerabilities view of the Security dashboard. On private repositories it also adds a GitHub check and comments on the pull request. Teams can write security policies in plain language, for example "any endpoint that returns customer data must check that the requester owns it", and every review applies them.
How to use
- Sign in to Vercel with a Pro or Enterprise team and enable Security Review in the team's Agent settings.
- Push to your connected GitHub repository as usual; findings land in the Security dashboard.
- To fix one, click Fix with Vercel Agent on the finding and review the pull request it opens, or run
vercel security vulnerabilities(Vercel CLI 65.10.0 or later) and hand the findings to your own coding agent.
Pricing
Security reviews are free until November 10, 2026. After that they are billed at the Vercel Agent rate: the underlying provider's token price with no markup, plus $0.25 per million tokens. Cost scales with how often you push and how much code changes. Fixes made with Vercel Agent are not part of the free window and are billed at that rate from the start.
Security Review analyzes source code only. It does not do runtime or penetration testing and is not a replacement for a security audit.
Read more in the Vercel changelog and the Vercel blog post.