Engineering Insights

AI code reviews by Vercel Agent now in Public Beta

Vercel Agent can now conduct code reviews, with validated suggestions that address issues across correctness, security, and performance. These reviews are fully codebase-aware, looking beyond the diff to any relevant files. Proposed patches are generated and validated in Vercel Sandboxes before they ever reach your PR. Key features also include: Available in public beta for all Pro and Enterprise teams, pricing is fully usage based with a $100 Vercel Agent credit. Try it for free in the , read m

Scale to one: How Fluid solves cold starts

Cold starts have long been the Achilles’ heel of traditional serverless. It’s not just the delay itself, but the delay happens. Cold starts happen when someone new discovers your app, when traffic is just starting to pick up, or during those critical first interactions that shape whether people stick around or convert.when Traditional serverless platforms shut down inactive instances after a few minutes to save costs. But then when traffic returns, users are met with slow load times while new i

What you need to know about vibe coding

In February 2025, Andrej Karpathy the term a new way of coding with AI, “[where] you fully give in to the vibes, embrace exponentials, and forget that the code even exists.”introducedvibe coding: Just months later, vibe coding is completely reshaping how developers and non-developers work. of U.S. developers use AI coding tools, adoption is accelerating for other roles, and English has become the fastest growing programming language in the world.Over 90% We explore this shift in detail in our

Cloudflare Tunnel, Cloudflare Tunnel for SASE - Connect and secure any private or public app by hostname, not IP — with hostname routing for Cloudflare Tunnel

You can now route private traffic to Cloudflare Tunnel based on a hostname or domain, moving beyond the limitations of IP-based routing. This new capability is free for all Cloudflare One customers. Previously, Tunnel routes could only be defined by IP address or CIDR range. This created a challenge for modern applications with dynamic or ephemeral IP addresses, often forcing administrators to maintain complex and brittle IP lists. What’s new: Hostname & Domain Routing: Create routes for indivi

Workers - Increased vCPU for Workers Builds on paid plans

We recently increased the available disk space from 8 GB to 20 GB for all plans. Building on that improvement, we’re now doubling the CPU power available for paid plans — from 2 vCPU to 4 vCPU. These changes continue our focus on making Workers Builds faster and more reliable. MetricFree PlanPaid Plans CPU2 vCPU4 vCPU Performance Improvements Fast build times: Even single-threaded workloads benefit from having more vCPUs 2x faster multi-threaded builds: Tools like esbuild and webpack can now

Democratizing AI Safety with RiskRubric.ai

Addressing security and quality issues with MCP tools in AI Agent

Model Context Protocol (MCP) is emerging as a standard protocol for federating tool calls between agents. Enterprises are starting to adopt MCP as a type of microservice architecture for teams to reuse each other's tools across different AI applications. But there are real risks with using MCP tools in production agents. Tool names, descriptions, and argument schemas become part of your agent's prompt and can change unexpectedly without warning. This can lead to security, cost, and quality issu

WebSocket Turbo Intruder: Unearthing the WebSocket Goldmine

Many testers and tools give up the moment a protocol upgrade to WebSocket occurs, or only perform shallow analysis. This is a huge blind spot, leaving many bugs like Broken Access Controls, Race condi