# Simplified onboarding for deepsec

DevFeed: [Simplified onboarding for deepsec](<https://devfeed.tech/articles/simplified-onboarding-for-deepsec-1099.md>)

Original publisher: [Read original article](<https://vercel.com/changelog/simplified-onboarding-for-deepsec>)

Author: Malte Ubl

Published: 2026-08-10T00:00:00Z

Content type: release

Language: en

Sources: [Vercel News](<https://devfeed.tech/sources/vercel-news.md>)

Topics: [Open Source](<https://devfeed.tech/topics/open-source.md>), [Security](<https://devfeed.tech/topics/security.md>), [Vercel](<https://devfeed.tech/topics/vercel.md>), [Artificial Intelligence](<https://devfeed.tech/topics/ai.md>)

Tags: [ai](<https://devfeed.tech/tags/ai.md>), [dependencies](<https://devfeed.tech/tags/dependencies.md>), [model](<https://devfeed.tech/tags/model.md>), [onboarding](<https://devfeed.tech/tags/onboarding.md>), [open-source](<https://devfeed.tech/tags/open-source.md>), [security](<https://devfeed.tech/tags/security.md>), [vercel](<https://devfeed.tech/tags/vercel.md>)

## AI overview

Vercel's open-source deepsec security review harness now provides simplified repository onboarding through a single command. It sets up an isolated workspace, configures model access, analyzes the codebase and attack surface, scans for patterns, and starts an AI review, with checkpointed resumption after interruptions or limits.

## Source excerpt

deepsec, the open-source security review harness from Vercel, now lets you set up a repository and run its first security review with a single command. The init command now automates the standard setup process: creates the isolated .deepsec/ workspace, the only thing added to your repository, and installs its dependencies configures model access, through Vercel AI Gateway or your own provider keys generates a description of the codebase and its attack surface that every later review depends on runs a pattern scan, generating extra scan patterns where the built-in set leaves coverage gaps starts the AI review of the flagged files Setup is checkpointed after each step. If a run stops, whether from closing the process, a failed step, or a hit cost or duration limit, re-running init resumes from the last completed step. Run npx deepsec init to start your first scan, or read the docs to learn more. Read more