隐私与广告选择
Git-Stars 会使用必要存储来保障网站运行。可选分析和广告测量脚本默认不加载，只有在你同意后，Google 等合作伙伴才可能按要求使用 Cookie 或类似标识符。 隐私政策
Deepsec is a security harness for finding vulnerabilities in your codebase powered by coding agents
这个仓库详情页已经具备足够的原创分析、来源证据和同类对比，可以作为 Git-Stars 的可索引评测页。
100
评测分
解决的问题
Deepsec solves the problem of finding subtle, long-lurking vulnerabilities that traditional static analysis tools miss, by leveraging coding agents that deeply understand code context. It is optimized for large monorepos where manual review is impractical, and can resume interrupted scans.
部署现实
当前可用的安装信号是：npx deepsec init。这只能作为起点，正式使用前建议让 Codex 或 Claude 检查 README、环境变量、运行时版本和部署目标。
商业可用性
当前记录的许可证是 Apache-2.0。这是重要的商业使用信号，但仍应核验许可证全文、依赖许可证、模型/API 条款和商标限制。
能力上限
Developers can build automated security audits for their entire codebase, integrate vulnerability scanning into CI/CD pipelines via `process --diff`, and create custom matchers for project-specific patterns. Real-world use cases include finding auth bypasses, injection flaws, and logic errors in web apps, with the ability to scale across distributed workers for massive repos.
Git-Stars 是独立产品，不隶属于 GitHub 或该项目。 分析可能由 AI 辅助生成，依据公开仓库元数据和 README 的短摘要。 我们不镜像完整 README、文档、Issue 或社媒评论。
vercel-labs/deepsec 被追踪为 TypeScript 项目，主要属于 AI Agent 方向。这个评估结合公开 GitHub 元数据、分类信号、短来源摘要和 Git-Stars 编辑规则，而不是复制项目文档。
增长检查：该仓库目前有 7.7k Star，今日 +119，本周 +0，本月 +0。这些窗口用于区分持续采用信号和短期曝光峰值。
维护检查：当前活跃度为 一般；最近一次推送距今 62 天，未关闭 Issue 为 62，约占总 Star 的 0.81%。这只是采用信号，不替代工程尽调。
采用检查：460 Fork 和 7.7k Watcher 反映项目被复用和关注的程度。许可证信号：Apache-2.0。商业或内部使用前请核验许可证兼容性。
适用判断：当你需要「TypeScript 技术栈团队评估生态原生工具」时，这个项目更值得评估；如果「需要法律审查、安全审计或生产 SLA 保证」，则需要谨慎。
来源检查：Git-Stars 当前为这份报告保留了 2 个明确来源引用，近期增长信号为 119。最终安装、安全和版本信息仍应以原始 GitHub 仓库为准。
原创分析
充分已经具备问题、能力和结论层面的原创判断。
来源
充分已附带仓库元数据和 README/来源引用。
许可证
充分已记录 Apache-2.0，可作为评估依据。
维护
充分仓库元数据中可以看到近期活跃信号。
同类对比
充分已有足够相近项目用于对比。
热度
7.7k 星标
复用
460 复刻
关注
7.7k 关注者
维护
moderate
许可证
Apache-2.0
未解决 Issue
62
deepsec is an agent-powered vulnerability scanner designed to run in your own infrastructure, optimized for on-demand review of all code in large-scale repositories. It surfaces hard-to-find issues that have been lurking in applications for a long time, using best models at maximum thinking levels. For large codebases, work fans out across worker machines in parallel, and interrupted runs can be resumed.
核心特性
- Uses best AI models at maximum thinking levels for deep vulnerability analysis. - Supports parallel distributed execution across Vercel Sandbox microVMs for large monorepos. - Resume capability: interrupted runs pick up where they left off, skipping already analyzed files.
AI Agent
Agent frameworks, autonomous workflows, and tool-use systems
npx deepsec init63
健康评分
一般
提交活跃度
Apr 30, 2026
创建于
Aug 13, 2026
最近提交
每日同步积累数据后，Star 历史将在此显示。
复刻
未解决
关注者
vercel-labs
GitHub 主页obra/superpowers
An agentic skills framework & software development methodology that works.
affaan-m/ECC
The agent harness performance optimization system. Skills, instincts, memory, security, and research-first development for Claude Code, Codex, Opencode, Cursor and beyond.
NousResearch/hermes-agent
The agent that grows with you
mattpocock/skills
Skills for Real Engineers. Straight from my .agents directory.
anomalyco/opencode
The open source coding agent.
✓
许可证
✓
Fork 情况
~ 一般
维护情况
解决的问题
Deepsec solves the problem of finding subtle, long-lurking vulnerabilities that traditional static analysis tools miss, by leveraging coding agents that deeply understand code context. It is optimized for large monorepos where manual review is impractical, and can resume interrupted scans.
能力范围
Developers can build automated security audits for their entire codebase, integrate vulnerability scanning into CI/CD pipelines via `process --diff`, and create custom matchers for project-specific patterns. Real-world use cases include finding auth bypasses, injection flaws, and logic errors in web apps, with the ability to scale across distributed workers for massive repos.
结论
Deepsec is for teams with large, security-critical codebases who can afford high compute costs (thousands of dollars) and want deep, agent-driven vulnerability discovery. It should be avoided by small projects or those with limited budgets. The key trade-off is thoroughness vs. cost and runtime.