Deployment Protection: Added security controls now available on all plans

Today we're thrilled to announce added privacy controls across all plans, including the ability to secure their preview deployments behind Vercel Authentication with just one click.

Alongside this announcement, we're adding a new set of features that make it frictionless for team members and external collaborators to work together on protected previews: Shareable Links, and Advanced Deployment Protection, now available to Pro teams and included in Enterprise plans.

Deployment Protection

Deployment protection offers flexible ways to make Preview Deployments private and accessible with Vercel Authentication or Shareable Links.

Vercel Authentication allows all Vercel users to log in with a Vercel account across the platform. Teams can now share protected previews with each other without having to enter additional security credentials. The same Vercel account they use to log in will work with their team's Preview Deployments. This provides an easy and frictionless way to collaborate while protecting pre-release products.

Vercel Authentication is replacing the existing “SSO Protection” feature Enterprise customers use today. SAML SSO, that is using an external identity provider to log in along with directory sync, will continue to be a feature only available in the Enterprise plan.

Share private preview deployments with people outside your team without the need to log in
Share private preview deployments with people outside your team without the need to log in

Shareable Links (Beta)

We're also introducing Shareable Links, a new way to share Preview Deployments with people outside your Vercel Team. This feature allows external collaborators a way to access Preview Deployments without the need to enter additional credentials, by adding a query string to Preview URLs.

While a Vercel Account is not required to access deployment via Shareable Link, you'll still need to log into a Vercel account to collaborate with Comments.

Unlimited Shareable Links are available to Pro and Enterprise customers, and Hobby users can take advantage of 1 link at a time. These are configurable in your Vercel Dashboard.

Announcing Advanced Deployment Protection

Based on customer feedback from existing Password Protection users, we are making it easier for Teams and agencies to develop, preview, and test their applications, securely.

Today we're introducing Advanced Deployment Protection, made for teams with strong security requirements, or teams that need to grant programmatic access to the secured Preview Deployments. Advanced Deployment Protection can be added to any Pro plan for $150, and is included with all Enterprise plans. Current Password Protection users will automatically get upgraded to Advanced Deployment Protection.

The header secret can be used to grant access to end to end testing tools
The header secret can be used to grant access to end to end testing tools

Bypass for Automation (beta)

As part of Advanced Deployment Protection, we are offering customers a header secret that can be used to grant secure access to previews programmatically. 

The header secret, for example, can be used to grant access to E2E (end-to-end) testing tools. E2E testing allows developers to simulate a real customer usage scenario through an automated tool. Users of these tools often struggle to allow these automated tools to access protected services.

Password Protection

For added security, Advanced Deployment Protection users are able to enforce a password to grant access to their Preview Deploys. Passwords can be configured in your Vercel dashboard.

Private Production Deployments (Beta)

In some cases, customers need to lock down a Production Deployment. This could be the case of an internal tool, or a completely new domain launch on Vercel. By ticking a single box, production deployments can now also be protected in the same way as a Preview Deployment would. 

Next steps

For now, deployment protection needs to be turned on manually. To get started, head to your project settings and enable protect preview deployments under deployment settings.

Learn more in the documentation.