
Vercel Puts $1M on the Line to Prove Its Sandbox Holds
Vercel is offering hackers up to $50,000 per bug to break Sandbox isolation, weeks after OpenAI agents escaped a sandbox and breached Hugging Face.
The Archive
Independent platform news and analysis for builders.

Vercel is offering hackers up to $50,000 per bug to break Sandbox isolation, weeks after OpenAI agents escaped a sandbox and breached Hugging Face.

Netlify's SSO login now routes on email domain alone, dropping the team ID field that locked out anyone who forgot it.

Firebase App Check added reCAPTCHA Enterprise as an attestation option for Android, Apple platforms and Flutter, matching the option web apps already had.

Supabase's alpha for scoped personal access tokens, live since August 10, closes a nearly three-year-old gap where any token controlled the whole account.

Firebase's JS SDK deprecates VertexAIBackend for AgentPlatformBackend, and the new class defaults to global instead of us-central1.

Supabase's Postgres Changes now supports AND filters, more operators and opt-in column selection, cutting bytes sent to Realtime subscribers.

Vercel's Enterprise Managed Users reached general availability August 11, forcing SAML-only sign-in and directory-managed accounts on company domains.

Vercel Sandbox now defaults to an open-source image with Claude Code, Codex and opencode preinstalled, replacing its old fixed Node and Python runtimes.

Netlify's AI Gateway now reaches DeepSeek, Meta, Mistral, Qwen and xAI via OpenRouter, but only models providers agree not to store or train on.