Deepsec is an agent-powered security harness designed to find vulnerabilities in large-scale codebases. It operates on your own infrastructure, performing on-demand reviews to surface hard-to-find issues.

Utilizing powerful AI models at maximum thinking levels, Deepsec scans can incur significant costs for extensive repositories, but customers find the investment valuable for rapid vulnerability patching. Scans can be distributed across worker machines and are resumable if interrupted. Basic setup involves initializing Deepsec, installing dependencies, and prompting a coding agent to configure the tool by analyzing project-specific information.

For comprehensive scans, it's recommended to use Vercel AI Gateway. Deepsec offers various commands for scanning, processing findings, triaging, revalidating fixes, and exporting results. It can also run on Vercel Sandbox micro VMs for enhanced security and distributed processing. Users should treat Deepsec as a coding agent with shell access, and running it within a sandbox limits potential exposure.