Vercel Security Dashboard is now generally available

The Vercel Security Dashboard is now generally available on all plans, giving you one place to see your security posture across every account and project.

You can access the Security Dashboard in the UI or run vercel security check in the Vercel CLI.

As teams grow and coding agents make it faster to spin up projects, small misconfigurations add up quietly. The Security Dashboard automatically flags issues like:

• Team members without 2FA

• Long-lived credentials that can be replaced with OIDC

• Public preview deployments

• Non-sensitive and stale environment variables

Copy link to headingThe Security Dashboard UI

Misconfigurations are ordered by risk with the most severe first, and each finding links to the settings that fix them.

Findings that are just noise for your team can also be muted, and all results can be exported to a CSV file for triage or reporting.

Copy link to headingThe Security Dashboard CLI

You can also run the same checks in your terminal through the new Vercel CLI vercel security check command, allowing your agents to work through the findings for you.

An agent using vercel security check --findings can read what failed, apply the fix and re-check to confirm. Fixes an agent can apply include:

• Turning on Git fork protection

• Marking an environment variable as sensitive

• Replacing a static credential with OIDC federation

You can also scope the check to one project with --project when you want a narrow change set.

In CI or any other non-interactive environment, the command writes the report to stdout as JSON automatically, giving agents structured output without extra flags.

Get started by running your first scan from the Security Dashboard, and learn more in the Security Dashboard documentation.

Kevin Corbett, Eric Dodds