tech lead @vercel — created vercel flags, global config, flags explorer & flags-sdk.dev
München, Bayern
- Tweets 1,447
- Following 449
- Followers 1,399
- Likes 4,078
Pinned Tweet
Today we launched Vercel Flags, a feature flag provider built into the Vercel platform.
Create and manage flags with targeting rules, segments, and environment controls directly in the Vercel Dashboard.
7
2
103
6,272
the title of this blog post is so good
i thought about it every single day since i first heard it
I've been cooking on this post for a bit, but with the cyber security events of this week I had to ship it:
Long-live static credentials must die. We never want to rotate API keys again.
Turns out only 8% of cloud and SaaS vendors support secure alternative. This is our call to action to change this AND our commitment to do our part:
- We are requiring vendors on our marketplace to support OIDC
- We shipped @shadcn components to make it easier to ship OIDC configuration
- We are expanding OIDC support on our own platform
The last generation got the web from HTTP to HTTPS. It is on us to move past API keys.
vercel.com/blog/death-to-lon…
7
1,261
New guides dropped for unit tests and e2e tests
1️⃣ Unit Tests
Just mock the flag like you would mock any other function
2️⃣ E2E Tests
Use the same mechanism as Flags Explorer to override flags to any value during testing.
2
13
845
this is such an elegant, obvious-in-hindsight approach to making sure you never forget auth and permission checks
Introducing gdp-ts: Ghosts of Departed Proofs for TypeScript.
gdp-ts is a library, linter and AI skill for safer API design. Under this contract, sensitive functions require 'proofs' that the caller performed an authorization check.
The typechecker verifies these proofs at compile time, preventing your team and agents from shipping catastrophic security (and other kinds of) bugs.
While these patterns have existed for quite some time, especially in ecosystems like Haskell, ① human code review and ② cognitive and syntactic overhead made these solutions niche.
The situation is now inverted. Agents are writing more code than we can review, and they *thrive* in tight loops with hard constraints that would frustrate us. We see this with the rise of Rust, borrow checker, code aesthetics debate and all.
The README and examples model a real-world Vercel API product constraint: changing the password on a Project requires a proof of a certain role + a certain entitlement. Thanks to Matt Noonan and Ollie Charles for their research in this space.
github.com/rauchg/gdp-ts
3
70
18,791
Dominik Ferber retweeted
We’ve confirmed a KVM 0day through our Vercel Sandbox bounty program. Affecting the industry’s gold standard solution for Linux virtualization.
2026 is wild! Thankful to Paulos and other researchers helping us make the most secure sandbox for agents. Full writeup coming.
105
151
2,073
256,742
How fast is Global Config?
• 0.01ms for the fastest reads
• 0.34ms p50
• 0.57ms p75
• 0.77ms p90
• 1.50ms p99
These are real numbers from an actual production app (our docs pages), where we read Global Config globally on every request.
5
21
1,477
Vercel Flags is even faster
• 0.04ms for the fastest reads
• 0.16ms p50
• 0.19ms p75
• 0.99ms p99
I know the 0.99 for p99 looks sus but it's the actual measurement :)
Vercel Flags contains optimizations that will make it into Global Config soon, making it even faster.
1
4
158
excited about @raunofreiberg's contributions to vercel flags -- we're polishing a few surfaces
rauno.me/notes/4
1
13
800
flags-sdk.dev passed 1m weekly downloads
thanks ya'll 🥹
4
2
62
11,235
you can now store more data and write more frequently. it‘s still insanely fast
Edge Config is now Global Config.
• Globally replicated reads in ~1ms
• Unlimited stores on Pro and Enterprise
• Stores up to 1 MB on every plan
Existing projects continue to work as-is, and new stores use the drop-in replacement package ↓
vercel.com/changelog/edge-co…
5
1,236
Flags SDK now bulk evaluates flags 10x faster
Calling evaluate(…) or precompute(…) now shares work across flag evaluations, and reduces the amount overall promises which reduces microtask queue overhead
This means your pages get served more quickly
vercel.com/changelog/flags-s…
1
21
1,342