Integrations / Vercel
Junglewise for Vercel
Give Junglewise a token for your Vercel team and pick the projects to watch. It follows every deployment and each project's settings, flags secrets that would ship to the browser and previews anyone can open, explains what matters, and drafts the fix. Junglewise only reads: nothing in your team changes unless you change it.
Read-only token. About 1 min to set up.
Connecting Vercel
How you connect it
- Step 1
Create an access token scoped to your Vercel team, and paste it into Junglewise.
- Step 2
Pick the projects to watch. Junglewise lists every project the token can see.
- Step 3
Junglewise reads the projects and their latest deployments straight away. Setup takes about a minute.
What Junglewise reads
Watched around the clock
Deployments
Every deployment, the commit it came from and who triggered it, so an unexpected release is noticed.
Environment variables
Which variables reach the browser, and which of those look like secrets that should stay on the server. Junglewise reads names and where they are exposed, not the values.
Protection settings
Whether preview deployments are protected, and which domains and aliases point at each project.
Audit log
Changes to team members, tokens and domains, on Vercel plans that keep an audit log.
What it changes
Nothing. It drafts the fix.
Keep a secret on the server
Which variable to rename and where the code reads it, so the secret stops shipping to the browser.
Protect preview deployments
The setting to turn on so previews need a Vercel login or a password.
Rotate an exposed secret
Step by step: issue a new one at the provider, update the variable, redeploy, then revoke the old one.
Junglewise only reads from Vercel, so every fix is yours to apply. It checks afterwards that the fix worked.
Vercel questions
- Can Junglewise change my Vercel projects?
- No. Junglewise only reads with the token, and drafts each fix for you to apply. It then checks that the fix worked.
- Does Junglewise see my secret values?
- No. It looks at variable names and where each one is exposed, which is enough to tell a secret that reaches the browser from one that does not.
- How do I disconnect?
- Delete the token in your Vercel account settings. Junglewise loses access immediately.
See what's lurking out there. It takes a minute.
Start with a free scan of your domain. When you're ready for the inside view, try Team free for 14 days.
Start 14-day free trial