Services in this catalog
- authentication - 2 checks
- deployment - 1 checks
- domain - 3 checks
- project - 10 checks
- security - 5 checks
- team - 5 checks
authentication
2 checks.| Check ID | Title | Severity |
|---|---|---|
authentication_no_stale_tokens | Vercel API tokens are not stale or unused for over 90 days | MEDIUM |
authentication_token_not_expired | Vercel API tokens have not expired | HIGH |
deployment
1 checks.| Check ID | Title | Severity |
|---|---|---|
deployment_production_uses_stable_target | Vercel production deployments originate from a stable branch | MEDIUM |
domain
3 checks.| Check ID | Title | Severity |
|---|---|---|
domain_dns_properly_configured | Vercel domain DNS records are properly configured | MEDIUM |
domain_ssl_certificate_valid | Vercel domains have a valid, non-expired SSL certificate | CRITICAL |
domain_verified | Vercel domains are verified | HIGH |
project
10 checks.| Check ID | Title | Severity |
|---|---|---|
project_auto_expose_system_env_disabled | Vercel project has automatic exposure of system environment variables disabled | MEDIUM |
project_deployment_protection_enabled | Vercel project has deployment protection enabled on preview deployments | HIGH |
project_directory_listing_disabled | Vercel project has directory listing disabled | MEDIUM |
project_environment_no_overly_broad_target | Vercel project has no environment variables targeting all three environments | MEDIUM |
project_environment_no_secrets_in_plain_type | Vercel project has no secret-like environment variables stored as plain text | HIGH |
project_environment_production_vars_not_in_preview | Vercel sensitive production environment variables do not target preview | MEDIUM |
project_git_fork_protection_enabled | Vercel project has Git fork protection enabled to prevent untrusted forks from accessing secrets | HIGH |
project_password_protection_enabled | Vercel project has password protection configured for deployments | MEDIUM |
project_production_deployment_protection_enabled | Vercel project has deployment protection enabled on production deployments | CRITICAL |
project_skew_protection_enabled | Vercel project has skew protection enabled to prevent version mismatches during deployments | LOW |
security
5 checks.| Check ID | Title | Severity |
|---|---|---|
security_custom_rules_configured | Vercel project has custom firewall rules configured | MEDIUM |
security_ip_blocking_rules_configured | Vercel project has IP blocking rules configured | MEDIUM |
security_managed_rulesets_enabled | Vercel project has managed WAF rulesets enabled | HIGH |
security_rate_limiting_configured | Vercel project has rate limiting rules configured | MEDIUM |
security_waf_enabled | Vercel project has the Web Application Firewall enabled | HIGH |
team
5 checks.| Check ID | Title | Severity |
|---|---|---|
team_directory_sync_enabled | Vercel team has directory sync (SCIM) enabled for automated provisioning | MEDIUM |
team_member_role_least_privilege | Vercel team follows least privilege with a limited number of owner roles | MEDIUM |
team_no_stale_invitations | Vercel team has no stale pending invitations older than 30 days | LOW |
team_saml_sso_enabled | Vercel team has SAML SSO enabled for centralized identity management | HIGH |
team_saml_sso_enforced | Vercel team enforces SAML SSO for all members | CRITICAL |
What’s next
Cloud Security overview
Connect a provider, see findings end-to-end.
All checks
Index across every provider.
Compliance frameworks
How check IDs map to SOC 2 / PCI / HIPAA / ISO controls.
Reports
Per-framework PDF scorecards.