Deepsec is an open-source security-focused coding agent harness developed by Vercel Labs. It is designed to orchestrate LLM-driven security audits, vulnerability discovery, and automated remediation across codebases, operating directly from terminal workflows and automated environments. Deepsec functions by scanning project repositories, identifying potential security weaknesses using configured LLMs and dedicated prompt samples, and testing against known vulnerability patterns. It integrates with workspace authentication (such as workspace OIDC) and executes targeted analysis against local or remote codebases using structured skills and agent prompts. Unlike general-purpose coding agents that focus broadly on feature implementation and refactoring, Deepsec specializes in security verification and vulnerability probing. Its architecture includes structured skill definitions (such as SKILL.md and CLAUDE.md configurations), fixture testing suites, and dedicated sample evaluation pipelines tailored for security auditing. Deepsec is distributed as an open-source TypeScript monorepo under the Vercel Labs GitHub organization. It requires developers to supply their own LLM API credentials or workspace tokens to orchestrate security inspection runs.
Tags: agent harness, ai agent, cli, codebase, coding agent, developer tools