Pending Vercel marketplace review

Vercel integration

Every preview deploy on Vercel becomes a fresh security scan, posted back to the deployment as a status check. Catch regressions before they get merged into production — without giving us access to your code.

Install

Open the Protect Your Vibes integration on the Vercel marketplace (link will be live at /vercel/integrations/console once approved).
Click "Add integration" and select the Vercel team / projects to enable.
Authorize. You'll be redirected back into the Vercel dashboard with the integration listed under your project's Integrations tab.

What happens per preview deploy

Vercel sends a deployment.created webhook the moment a preview URL goes live.
We kick off a scan against the public preview URL — same checks as a manual /scan, no extra setup.
Within 30–90 seconds the result is posted back as a deployment status check on the Vercel deployment page, with a link into the Protect Your Vibes report.
If you also have the Slack/Discord integration wired up, regressions ping your chosen channel.

Privacy

We scan the public preview URL only. We do not read source files, environment variables, build logs, or any private project data. The integration receives deployment metadata from Vercel (project ID, deployment URL, commit SHA) — that's it.

If your preview deploys are behind Vercel's deployment protection, the scanner won't be able to reach them. Either disable protection for previews or use the GitHub App instead, which works on diffs and doesn't depend on URL reachability.

Prefer a GitHub App? →Other integrations →