Simplified onboarding for deepsec

deepsec, the open-source security review harness from Vercel, now lets you set up a repository and run its first security review with a single command.

npx deepsec init

The init command now automates the standard setup process:

• creates the isolated .deepsec/ workspace, the only thing added to your repository, and installs its dependencies

• configures model access, through Vercel AI Gateway or your own provider keys

• generates a description of the codebase and its attack surface that every later review depends on

• runs a pattern scan, generating extra scan patterns where the built-in set leaves coverage gaps

• starts the AI review of the flagged files

Setup is checkpointed after each step. If a run stops, whether from closing the process, a failed step, or a hit cost or duration limit, re-running init resumes from the last completed step.

Run npx deepsec init to start your first scan, or read the docs to learn more.