Vercel Security Review 上线不到一周扫描出 57,897 个漏洞
Vercel 这个安全扫描 Agent 上线不到一周就揪出 6 万个漏洞，还自动修了近 1.5 万个。不用部署在 Vercel 也能扫自己的仓库，11 月 10 日前免费，管代码的都该跑一遍。
Vercel Security Review 上线不足一周，已识别 57,897 个漏洞，其中 6,029 个为 critical 或 high 级别，14,665 个已由 Agent 自动修复。上线首日（24 小时内）的数据为：识别 6,817 个漏洞、580 个 critical/high、1,411 个已修复。
该功能的机制是接入任意代码仓库后由 AI Agent 自动扫描并生成修复补丁，不要求项目部署在 Vercel 平台上。Guillermo Rauch 表示，让他意外的两点是大量 critical 漏洞此前未被察觉，以及 Agent 自动修复的流畅程度。
定价方面，该产品在 2025 年 11 月 10 日之前完全免费，之后预计转为收费功能。对维护多个仓库的团队来说，这是一个在上线前批量排查安全问题的低成本途径。
Vercel Security Review, less than 1 week since launch: ✓ 𝟱𝟳,𝟴𝟵𝟳 vulnerabilities identified ✓ 𝟲,𝟬𝟮𝟵 critical or high ✓ 𝟭𝟰,𝟲𝟲𝟱 already patched by Agent I'm shocked at ① the number of critical vulnerabilities that would go unnoticed and ② the ease at which the agent automatically fixes them. You can turn it on for any repo, no matter where you deploy to. Guillermo Rauch @rauchg In just 24 hours 🤯 ✓ 𝟲,𝟴𝟭𝟳 vulnerabilities identified ✓ 𝟱𝟴𝟬 critical or high ✓ 𝟭,𝟰𝟭𝟭 already patched by Agent Vercel Security Reviews are 100% free until Nov 10 🔗 View Quoted Tweet📊 32 ⚡
This report is categorized under AITOP's "Products" desk, focusing on US frontier AI labs and Silicon Valley technology leaders. Within our cross-regional analytical framework, it directly maps to AI developer toolchains, coding agents, and engineering workflows and US-China foundation model benchmarks and commercialization comparison. Key entities and technical topics under continuous tracking include Vercel, Security Review, 代码安全, 智能体.
Source attribution: curated from Guillermo Rauch (@rauchg).
