Open-source security scanner and configuration auditor for Vercel. 130+ checks across 20 categories. Finds leaked tokens, WAF gaps, NEXT_PUBLIC_ secret leaks, subdomain takeover risks, Next.js CVEs, and more. Single binary, zero dependencies.
cli golang security security-audit nextjs pentesting compliance security-scanner security-tools devsecops cloud-security misconfiguration subdomain-takeover prowler vercel cspm scoutsuite posture-management nextjs-security vercel-security
-
Updated
Aug 31, 2026 - Go