Vercel Security & compliance

Excessive OWNER count

Part of the Account supply chain check · fix arrives as a guide

What it is

The team has more members with the OWNER role than it needs.

Why it matters

Owners can change billing, add and remove members, alter production environment variables, and delete projects. Every owner account is a full-takeover path, so the count is the number of accounts worth phishing.

How to fix it

Reduce owners to the few who genuinely need billing and team management, and move the rest to member. Confirm every remaining owner has two-factor authentication.

Run them all on your app

Connect your repo and your live services with read-only scopes. The first scan is free, and nothing changes without your approval.