Vercel Expands Token Scanning With Truffle Security

This is a meaningful security upgrade because notification-only secret scanning routinely leaves valid credentials active. Automated revocation turns leaked tokens into contained incidents, though developers still need scoped, short-lived credentials and rotation practices.

• –Extends coverage beyond GitHub and npm into registries, container images, datasets, apps, and public web archives
• –Truffle Security has already helped Vercel revoke hundreds of exposed tokens
• –Protects high-impact services such as Vercel Sandbox and Vercel AI Gateway from unauthorized usage and surprise costs
• –Monthly Common Crawl scanning addresses leaks that traditional repository scanners cannot see
• –Automatic revocation may disrupt workloads, so teams should monitor notification emails and maintain token inventories