vercel-labs/deepsec

Deepsec solves the problem of finding subtle, long-lurking vulnerabilities that traditional static analysis tools miss, by leveraging coding agents that deeply understand code context. It is optimized for large monorepos where manual review is impractical, and can resume interrupted scans.

Developers can build automated security audits for their entire codebase, integrate vulnerability scanning into CI/CD pipelines via `process --diff`, and create custom matchers for project-specific patterns. Real-world use cases include finding auth bypasses, injection flaws, and logic errors in web apps, with the ability to scale across distributed workers for massive repos.