Privacy and advertising choices
Git-Stars uses essential storage for site operation. Optional analytics and ad-measurement scripts stay disabled unless you accept them; partners such as Google may then use cookies or similar identifiers where required. Privacy Policy
Deepsec is a security harness for finding vulnerabilities in your codebase powered by coding agents
This repository page has enough original analysis, source evidence, and comparison context to be treated as an indexable Git-Stars review.
100
review score
Problem solved
Deepsec solves the problem of finding subtle, long-lurking vulnerabilities that traditional static analysis tools miss, by leveraging coding agents that deeply understand code context. It is optimized for large monorepos where manual review is impractical, and can resume interrupted scans.
Deployment reality
The available setup signal starts with: npx deepsec init. Treat this as a starting point, then ask Codex or Claude to inspect the README, environment variables, runtime version, and deployment target before production use.
Commercial use
The recorded license is Apache-2.0. This is a useful commercial-use signal, but teams should still verify license text, dependencies, model/API terms, and trademark constraints.
Capability ceiling
Developers can build automated security audits for their entire codebase, integrate vulnerability scanning into CI/CD pipelines via `process --diff`, and create custom matchers for project-specific patterns. Real-world use cases include finding auth bypasses, injection flaws, and logic errors in web apps, with the ability to scale across distributed workers for massive repos.
Git-Stars is independent and not affiliated with GitHub or this project. Analysis may be AI-assisted and based on public repository metadata plus short README-derived summaries. We do not mirror full README files, docs, issues, or social comments.
vercel-labs/deepsec is tracked as a TypeScript project in the AI Agent area. This evaluation combines public GitHub metadata, category signals, short source summaries, and Git-Stars editorial rules rather than copying project documentation.
Momentum check: the repository has 7.7k total stars, with +119 today, +0 this week, and +0 this month. These growth windows help distinguish durable adoption from short-lived visibility spikes.
Maintenance check: current activity is Moderate; the latest push was 62 days ago, and the open issue queue is 62, about 0.81% of total stars. Treat this as an adoption signal, not a substitute for engineering due diligence.
Adoption check: 460 forks and 7.7k watchers suggest how often the project is reused or followed. License signal: Apache-2.0. Always verify license compatibility before commercial or internal use.
Practical fit: this project is most relevant when you need TypeScript teams evaluating ecosystem-native tooling. Be cautious when you need a legal review, security audit, or production SLA.
Source check: Git-Stars currently has 2 explicit source reference(s) for this report and a recent growth signal of 119. Follow the original GitHub repository for final install, security, and release information.
Analysis
ReadyOriginal problem, capability, and verdict guidance are available.
Sources
ReadyRepository metadata and README/source references are attached.
License
ReadyApache-2.0 is recorded for review.
Maintenance
ReadyRecent activity is visible in repository metadata.
Alternatives
ReadyEnough nearby projects exist for comparison.
Momentum
7.7k Stars
Reuse
460 Forks
Attention
7.7k Watchers
Maintenance
moderate
License
Apache-2.0
Open issues
62
deepsec is an agent-powered vulnerability scanner designed to run in your own infrastructure, optimized for on-demand review of all code in large-scale repositories. It surfaces hard-to-find issues that have been lurking in applications for a long time, using best models at maximum thinking levels. For large codebases, work fans out across worker machines in parallel, and interrupted runs can be resumed.
Key Features
- Uses best AI models at maximum thinking levels for deep vulnerability analysis. - Supports parallel distributed execution across Vercel Sandbox microVMs for large monorepos. - Resume capability: interrupted runs pick up where they left off, skipping already analyzed files.
AI Agent
Agent frameworks, autonomous workflows, and tool-use systems
npx deepsec init63
Health Score
Moderate
Commit Activity
Apr 30, 2026
Created
Aug 13, 2026
Last push
Star history will appear after daily syncs accumulate data.
Forks
Open
Watchers
vercel-labs
GitHub profileobra/superpowers
An agentic skills framework & software development methodology that works.
affaan-m/ECC
The agent harness performance optimization system. Skills, instincts, memory, security, and research-first development for Claude Code, Codex, Opencode, Cursor and beyond.
NousResearch/hermes-agent
The agent that grows with you
mattpocock/skills
Skills for Real Engineers. Straight from my .agents directory.
anomalyco/opencode
The open source coding agent.
✓
License
✓
Forked
~ Moderate
Maintained
Problem Solved
Deepsec solves the problem of finding subtle, long-lurking vulnerabilities that traditional static analysis tools miss, by leveraging coding agents that deeply understand code context. It is optimized for large monorepos where manual review is impractical, and can resume interrupted scans.
Capabilities
Developers can build automated security audits for their entire codebase, integrate vulnerability scanning into CI/CD pipelines via `process --diff`, and create custom matchers for project-specific patterns. Real-world use cases include finding auth bypasses, injection flaws, and logic errors in web apps, with the ability to scale across distributed workers for massive repos.
Bottom Line
Deepsec is for teams with large, security-critical codebases who can afford high compute costs (thousands of dollars) and want deep, agent-driven vulnerability discovery. It should be avoided by small projects or those with limited budgets. The key trade-off is thoroughness vs. cost and runtime.