Monday, December 19th 2022
Deployment Protection: Added security controls now available on all plans
Today we're thrilled to announce added privacy controls across all plans, including the ability to secure their preview deployments behind Vercel Authentication with just one click.
- Protect previews for free across all plans with Deployment Protection
- New ways to access and collaborate with Shareable Links and Vercel Authentication
- Advanced Deployment Protection: Better E2E testing, private Production Deployments, and Password Protection
Alongside this announcement, we're adding a new set of features that make it frictionless for team members and external collaborators to work together on protected previews: Shareable Links, and Advanced Deployment Protection, now available to Pro teams and included in Enterprise plans.
Deployment protection offers flexible ways to make Preview Deployments private and accessible with Vercel Authentication or Shareable Links.
Vercel Authentication allows all Vercel users to log in with a Vercel account across the platform. Teams can now share protected previews with each other without having to enter additional security credentials. The same Vercel account they use to log in will work with their team's Preview Deployments. This provides an easy and frictionless way to collaborate while protecting pre-release products.
Vercel Authentication is replacing the existing “SSO Protection” feature Enterprise customers use today. SAML SSO, that is using an external identity provider to log in along with directory sync, will continue to be a feature only available in the Enterprise plan.
Shareable Links (Beta)
We're also introducing Shareable Links, a new way to share Preview Deployments with people outside your Vercel Team. This feature allows external collaborators a way to access Preview Deployments without the need to enter additional credentials, by adding a query string to Preview URLs.
While a Vercel Account is not required to access deployment via Shareable Link, you'll still need to log into a Vercel account to collaborate with Comments.
Unlimited Shareable Links are available to Pro and Enterprise customers, and Hobby users can take advantage of 1 link at a time. These are configurable in your Vercel Dashboard.
Announcing Advanced Deployment Protection
Based on customer feedback from existing Password Protection users, we are making it easier for Teams and agencies to develop, preview, and test their applications, securely.
Today we're introducing Advanced Deployment Protection, made for teams with strong security requirements, or teams that need to grant programmatic access to the secured Preview Deployments. Advanced Deployment Protection can be added to any Pro plan for $150, and is included with all Enterprise plans. Current Password Protection users will automatically get upgraded to Advanced Deployment Protection.
Bypass for Automation (beta)
As part of Advanced Deployment Protection, we are offering customers a header secret that can be used to grant secure access to previews programmatically.
The header secret, for example, can be used to grant access to E2E (end-to-end) testing tools. E2E testing allows developers to simulate a real customer usage scenario through an automated tool. Users of these tools often struggle to allow these automated tools to access protected services.
For added security, Advanced Deployment Protection users are able to enforce a password to grant access to their Preview Deploys. Passwords can be configured in your Vercel dashboard.
Private Production Deployments (Beta)
In some cases, customers need to lock down a Production Deployment. This could be the case of an internal tool, or a completely new domain launch on Vercel. By ticking a single box, production deployments can now also be protected in the same way as a Preview Deployment would.
For now, deployment protection needs to be turned on manually. To get started, head to your project settings and enable protect preview deployments under deployment settings. Learn more in the documentation.
Engineering Manager, Product, Enterprise Team
Sr. Content Developer