Reading up on Vercel Sandbox

Vercel launches a two‑week public HackerOne bounty offering up to $1 million for researchers who can escape its Sandbox microVM isolation.

Vercel argues that open-weight models like Kimi K3 already enable offensive security research, but defenders can use stronger frontier models today to proactively find vulnerabilities via tools like deepsec before the advantage erodes.

Vercel recommends separating agent harness from generated code execution in isolated sandboxes with secret injection to prevent prompt injection and credential theft in agentic architectures.

Vercel replaced a complex multi-tool text-to-SQL agent with a simpler file system agent using bash commands, achieving 3.5x faster execution and 100% success rate.