Skip to content

Company

Vercel

Vercel is a cloud platform for building and deploying web applications, known for serverless hosting and the Next.js framework.

Known aliases

  • Vercel Agent
  • vercel.app
  • vercel.com
  • Vercel Inc.
  • Vercel Marketplace
  • Vercel MCP
  • Vercel Pro
  • Vercel Sandbox
  • Vercel serverless functions
  • Vercel Ventures
  • ZEIT

Current stories

buildOne report1 publisher

Vercel puts Python backends into the same preview and rollback flow as the frontend

Vercel made Python on its platform generally available, with three of the bundled Python SDKs still labelled beta. A FastAPI or Flask backend can now share previews and rollbacks with a JavaScript frontend, Vercel says.

Publishers:blog.vercel.com

Reality

Evidence45
Adoption
Not scored
Hype gap+15
Incentives70
Confidence60
buildOne report1 publisher

Teams with copied-in Vercel AI Elements lose upstream fixes at the end of November 2026

Vercel will deprecate its AI Elements registry at the end of November 2026 in favor of shadcn/ui's own 21 patterns, a DEV Community post says. Nothing breaks on 1 December, because the components live in each project's own source.

Publishers:dev.to

Reality

Evidence50
Adoption
Not scored
Hype gap−10
Incentives40
Confidence55
securityOne report1 publisher

Guest VMs can read host memory through Linux kernel flaw PwnEscape

Linux kernel flaw CVE-2026-99999 let pwn.ai's Paulos Yibelo read about 32 bytes of host memory per packet from Vercel's production sandboxes. Operators who host other people's VMs need the fix in the kernel the host itself runs.

Reality

Evidence66
Adoption
Not scored
Hype gap+8
Incentives50
Confidence62
securityOne report1 publisher

Next.js 16.4.1 and 15.5.28 fix two 9.5-rated code-execution flaws in caching and SVG rendering

Next.js released versions 16.4.1 and 15.5.28 on October 14 to fix two unauthenticated code-execution flaws that Vercel rated CVSS 9.5. As of October 15 the caching flaw had no CVE and no workaround, so npm audit may stay quiet and only the upgrade closes it.

Reality

Evidence55
Adoption
Not scored
Hype gap+10
Incentives
Not scored
Confidence55
buildOne report1 publisher

Vercel AI Gateway adds five named Microsoft MAI models for voice, transcription and images

Vercel added five named Microsoft MAI models to AI Gateway on October 1, 2026, covering speech, transcription and image generation. Each modality bills in a different unit, so teams have to estimate cost feature by feature.

Publishers:dev.to

Reality

Evidence45
Adoption
Not scored
Hype gap+5
Incentives40
Confidence55
securityOne report1 publisher

Crafted certificate lets an agent in Vercel Sandbox leak data past its network allowlist, AIR says

AI security startup AIR says a certificate flaw in Vercel Sandbox lets an agent send data to an attacker's server via an approved host. Vercel told AIR it needs time to find a fix, co-founder Niv Hoffman said, so operators have nothing to apply yet.

Publishers:therecord.media

Reality

Evidence50
Adoption
Not scored
Hype gap+15
Incentives55
Confidence55
securityOne report1 publisher

Phishing campaign plants Action1 remote-management agent through fake PDF invoices

Phishing emails carrying fake PDF invoices are installing Action1's remote-management agent, SANS ISC handler Xavier Mertens reported. It follows a ScreenConnect campaign he documented a few days earlier that used the same fake-invoice lure.

Publishers:isc.sans.edu

Reality

Evidence70
Adoption
Not scored
Hype gap0
Incentives
Not scored
Confidence72
investOne report1 publisher

Fake Ledger pages near the top of Google search go after wallet recovery phrases

Fake Ledger sites in Google results are asking for recovery phrases while Ledger probes losses researchers put above $86 million. Nothing yet ties that sum to the pages, but the way the campaigns were built makes a top search result a working route into self-custody wallets.

Publishers:crypto.news

Reality

Evidence55
Adoption
Not scored
Hype gap+20
Incentives
Not scored
Confidence50
investOne report1 publisher

OpenAI launches rival classification product three weeks after Jev's viral debut

OpenAI launched its Decisions API on October 6, three weeks after startup TypeSafe's cheap classification model Jev went viral with developers. Both chase the routine judgments a business automates by the thousand, where cost per decision decides what is worth doing.

Publishers:fortune.com

Reality

Evidence45
Adoption35
Hype gap+25
Incentives60
Confidence50
securityOne report1 publisher

Ledger phishing ads ran under a verified Google advertiser and routed victims through Google Sites

Zscaler found Ledger phishing ads running under a verified Google advertiser, with Vercel redirect domains rotating every 15 to 20 minutes. The ad displayed google.com and the pages sat on Google and Vercel hosting, so domain reputation and the verified badge gave defenders little to catch.

Publishers:zscaler.com

Reality

Evidence55
Adoption
Not scored
Hype gap0
Incentives35
Confidence55
buildConfirmed4 publishers

OpenAI splits classification into a Decisions API priced at 10 cents per million input tokens

OpenAI's Decisions API answers yes/no, pick-one and scale questions for $0.10 per million input tokens, with output free. Jev sells the same three question types for text at less than half that, so OpenAI's case rests on image input and compliance terms.

Perspective Coverage

4 publishers
Builder
Builder 59%
Operator
Operator 24%
Investor
Investor 17%

Reality

Evidence62
Adoption20
Hype gap+15
Incentives45
Confidence60
investConfirmed10 publishers

US-China tariff truce keeps a January expiry after Xi's Washington summit

Washington and Beijing pushed their tariff truce two months past November 10 and left $30 billion a side of tariff relief at the recommendation stage. Tariff risk still has an expiry date, now around January 10, even with a new Board of Trade and formal AI talks in place.

Perspective Coverage

10 publishers
Builder
Builder 25%
Operator
Operator 38%
Investor
Investor 37%

Reality

Evidence76
Adoption30
Hype gap+12
Incentives58
Confidence70

Earlier coverage

  1. Vercel's AI Gateway bills two model runs for every low-confidence decision it escalates

    Build · October 7, 2026 · Confirmed2 publishers

  2. Lightpanda 1.0 makes a browser without a renderer a production option for crawlers and agents

    Build · October 2, 2026 · Confirmed2 publishers

  3. Vercel Labs' ScriptC trades sustained TypeScript throughput for millisecond startups

    Build · September 27, 2026 · Confirmed2 publishers

  4. TypeSafe ships a model that answers only with a decision and a confidence number

    Product · September 22, 2026 · Confirmed2 publishers

  5. One model string moves Vercel AI Gateway traffic to Claude Sonnet 5.5

    Build · September 30, 2026 · Confirmed14 publishers

  6. A 0.6B Qwen model and 25 lines of Python reproduce the interface TypeSafe sells as Jev

    Build · October 1, 2026 · Confirmed2 publishers

  7. Sign in with ChatGPT now counts Amp and Devin agent runs against Plus and Pro plan limits

    Build · September 29, 2026 · Confirmed2 publishers

  8. Crafted Open Graph text can reach code execution in Next.js 16.2 through 16.3.5

    Security · September 23, 2026 · Confirmed2 publishers

  9. TypeSafe AI seeks $10 billion-plus valuation two weeks after $40 million seed round

    Invest · September 26, 2026 · Confirmed2 publishers

  10. Jev turns a catalogue ID from a prompt constraint into part of the decision domain

    Build · September 22, 2026 · Confirmed14 publishers

  11. Cursor ships a code host; GitHub goes dark for 402 minutes the same day

    Build · August 17, 2026 · Confirmed5 publishers

  12. Cursor becomes a code host by default, and GitHub's seven outages in 15 days is the opening

    Product · August 17, 2026 · Confirmed4 publishers

  13. Temporal's second doubling in a year prices durable execution as agent plumbing

    Product · August 19, 2026 · Confirmed2 publishers

  14. Slack Code puts four rival coding agents behind one door, and makes context the product

    Build · August 20, 2026 · Confirmed3 publishers

  15. Google splits transcription in two, and quietly absorbs your cleanup layer

    Build · August 26, 2026 · Confirmed6 publishers

  16. Vercel moves DNS, renewals and membership into a CLI your pipeline already trusts

    Build · August 27, 2026 · Confirmed2 publishers

  17. A 46-country phishing chain ends by installing the RMM tools allow lists already trust

    Security · September 3, 2026 · Confirmed2 publishers

  18. TypeSafe must meter 23.8 trillion input tokens to bill a million dollars for Jev

    Invest · September 21, 2026 · Confirmed3 publishers

  19. Agents read their own episode clock off a public hit counter

    Build · September 23, 2026 · One report1 publisher

  20. Filling GLM-5.3-Flash's million-token window costs three times its per-task benchmark price

    Build · September 20, 2026 · Confirmed2 publishers