Integrations / Vercel
Junglewise for Vercel
Add the Junglewise integration to your Vercel team and it watches every project there. It follows each deployment and each project's settings, flags secrets that would ship to the browser and fork protection that is off, explains what matters, and drafts the fix. Junglewise only reads: nothing in your team changes unless you change it.
Vercel integration. Read access to start. About 1 min to set up.
Connecting Vercel
How you connect it
- Step 1
Click Connect Vercel. Vercel opens its own page, where you pick the team or personal account and confirm the read access the integration asks for.
- Step 2
Junglewise lists every project the integration can see and watches them all; switch any off from the Sources page.
- Step 3
It reads the projects and their latest deployments straight away, and Vercel tells it about each new deployment as it happens. Setup takes about a minute.
What Junglewise reads
Watched around the clock
Deployments
Every deployment, the commit it came from and who triggered it, so an unexpected release is noticed.
Environment variables
Which variables reach the browser, and which of those look like secrets that should stay on the server. Junglewise reads names and where they are exposed, not the values.
Protection settings
Whether preview deployments are protected, and which domains and aliases point at each project.
Domains
Which domains and aliases point at each project, so a dangling or unexpected one is noticed.
What it changes
Nothing. It drafts the fix.
Keep a secret on the server
Which variable to rename and where the code reads it, so the secret stops shipping to the browser.
Protect preview deployments
The setting to turn on so previews need a Vercel login or a password.
Rotate an exposed secret
Step by step: issue a new one at the provider, update the variable, redeploy, then revoke the old one.
Junglewise only reads from Vercel, so every fix is yours to apply. It checks afterwards that the fix worked.
Vercel questions
- Can Junglewise change my Vercel projects?
- No. The integration only reads, and Junglewise drafts each fix for you to apply. It then checks that the fix worked.
- Does Junglewise see my secret values?
- No. It looks at variable names and where each one is exposed, which is enough to tell a secret that reaches the browser from one that does not.
- How do I disconnect?
- Remove the Junglewise integration under your team's Integrations settings on Vercel. Junglewise loses access immediately.
See what's lurking out there. It takes 30 seconds.
Start with a free scan of your domain. When you're ready for the inside view, try Team free for 14 days.
Start 14-day free trial