deepsec

deepsec

node_modules/

npx deepsec …

vercel-labs/deepsec

docs/

Where the docs are

node_modules/deepsec/dist/docs/

<deepsec-clone>/docs/

• getting-started.md

  — first-scan walkthrough

• configuration.md

  — full

  deepsec.config.ts

  reference

• plugins.md

  — plugin slots (matchers, notifiers, ownership, people, executor)

• writing-matchers.md

  — how to grow the matcher set with a coding agent

• models.md

  — model selection, defaults, refusals, future models

• vercel-setup.md

  — getting AI Gateway and Vercel Sandbox keys / tokens

• architecture.md

  — pipeline internals

• data-layout.md

  —

  data/

  schemas (FileRecord, RunMeta, …)

• faq.md

  — cost, model choice, sandbox mode, FP rate

Worked example

node_modules/deepsec/dist/samples/webapp/

<deepsec-clone>/samples/webapp/

deepsec.config.ts

matchers/

INFO.md

config.json

How to answer common questions

• "How do I run a scan?" →

  getting-started.md

  .
• "What goes in

  deepsec.config.ts

  ?" →

  configuration.md

  +

  samples/webapp/deepsec.config.ts

  .
• "How do I add a matcher?" →

  writing-matchers.md

  +

  samples/webapp/matchers/*.ts

  .
• "How do I write a plugin?" →

  plugins.md

  +

  samples/webapp/deepsec.config.ts

  (inline plugin pattern).
• "What does deepsec actually do?" →

  architecture.md

  .
• "What's in

  data/<id>/files/foo.json

  ?" →

  data-layout.md

  .
• "Which model / agent should I use?" →

  models.md

  .
• "How do I get an AI Gateway / Sandbox token?" →

  vercel-setup.md

  .