Guillermo Rauch Launches Deepsec: Open-Source Agent-Powered Security Scanner for Large Codebases

X/Twittervia @rauchg·high signal

Vercel released Deepsec (npx deepsec), an open-source security harness that uses coding agents (Claude Opus, GPT) to find vulnerabilities in large codebases. It runs locally, scales to 1,000+ concurrent sandboxes, and uses a two-pass system: regex-based static analysis flags security-sensitive files, then AI agents trace data flows and verify findings to reduce false positives. Apache 2.0 licensed. Already has 2,200+ likes on the announcement tweet.