Vercel Labs Ships deepsec and Openly Prices It — Agent-Powered Security Scans That 'Cost Thousands or Even Tens-of-Thousands of Dollars for Large Codebases'

GitHub·high signalXBlueskyLinkedInCopy link

vercel-labs/deepsec (6,383 stars, +1,082 this week) runs a three-stage pipeline — `scan` with regex matchers and no AI, `process` for AI investigation emitting findings plus a recommendation, and `revalidate` which re-checks existing findings against git history to see if they were already fixed — with a tunable `--thinking-level`. The README's candor is the story: it states scans can cost thousands to tens-of-thousands of dollars on large repos, a rare public admission of what deep agentic analysis actually costs. The revalidate-against-git-history step is the reusable idea for anyone whose scanner keeps re-reporting fixed issues.