Vercel Firewall

Fresh

by Vercel

L7 web application firewall with custom rules engine, managed rulesets, IP blocking (up to 1,000 entries on Enterprise), and CDN-level DDoS mitigationDevelopers and security teams who need to filter malicious traffic, enforce geo/IP policies, and protect apps at the CDN layer without a separate WAF vendorFree tier

Application-layer WAF with DDoS absorption, custom rule authoring, IP/CIDR blocking, and managed threat rulesets on Enterprise.

Features

Automatic Git-based CI/CD deploymentsall plansPer-branch and per-PR preview deploymentsall plansGlobal Edge Network (125+ PoPs, 20 Vercel regions)all plansIncremental Static Regeneration (ISR)all plansFluid Compute (serverless with server-process semantics)all plansEdge Middlewareall plansFeature Flagsall plansSkew Protection (deployment version pinning)paid onlyRolling Releasespaid onlyVercel Workflows (event-triggered automation pipelines)all plansOpenTelemetry tracing via CLI (vercel curl --trace)all plansSpend management and project-level budget capspaid onlyCustom WAF rules (up to 40 on Pro, 1,000 on Enterprise)paid onlyManaged WAF rulesetsenterprise onlyIP/CIDR blocking (up to 100 Pro, 1,000 Enterprise)paid onlySAML SSOpaid onlySCIM directory synchronizationenterprise onlyAudit logsenterprise only99.99% uptime SLAenterprise onlyMulti-region compute with automatic failoverenterprise onlyAI Gateway — zero-markup LLM proxy with 100+ modelsall plansAI Gateway BYOK (Bring Your Own Key)all plansAI SDK v5/v6 native integrationall plansThird-party integrations marketplaceall plansAdvanced Deployment Protection (password/Vercel auth gating)paid only

More from Vercel