Security Intel

Vercel Security Research

Vulnerability disclosures, security patterns, and hardening guides for Next.js and Vercel deployments. Written by security engineers.

Latest

vercelsecurity breachsupply chain attack

The Vercel Breach Wasn't a Vercel Problem

Vercel disclosed a breach on April 19, 2026. The attacker didn't hack Vercel directly — they compromised a third-party AI tool called Context.ai and pivoted into Vercel's internal systems. Here's how the attack chain worked and what it tells us about AI tool supply chain risk.

Read article

All Articles

vercelddos protection

How to Handle Vercel Security Checkpoint Error

Solve 'We're verifying your browser' Vercel error. Step-by-step guide to handle security checkpoint blocking traffic to your production site.

Security Scanner

Find vulnerabilities in your Vercel app

Don't just read about security issues—find them in your own deployments. Free scan, no signup required.

What we detect

Exposed secrets in client bundles
Server Action authentication gaps
Middleware bypass vulnerabilities
Missing security headers