Web Application Firewall mitigated traffic is free on Vercel
Quick Answer
Vercel now offers free CDN requests and data transfer for traffic denied, challenged, or rate-limited by its Web Application Firewall (WAF).
Quick Take
This change eliminates unexpected costs from scrapers and bots, providing unlimited DDoS mitigation at no charge, automatically applied to all projects using Vercel Firewall.
Key Points
- Vercel waives costs for denied, challenged, or rate-limited traffic.
- Unlimited DDoS mitigation is provided at no cost.
- No configuration is needed for automatic application of waivers.
- Custom and managed rules are available for non-DDoS bad traffic.
- Protects against scrapers and credential-stuffing botnets.
📖 Reader Mode
~1 min read1 min read
Vercel Firewall now waives CDN Requests and Fast Data Transfer for any traffic Web Application Firewall rules deny, challenge, or rate-limit.
Vercel has always provided unlimited DDoS mitigation at no cost. Vercel Web Application Firewall, included in CDN cost, gives you custom rules, managed rules, and rate limiting for bad traffic that isn't DDoS. With this change, you don't pay for requests or bandwidth that Vercel Firewall denies, challenges, or rate-limits. That means no surprise bill when a scraper hammers your product pages, a credential-stuffing botnet hits your login route, or a bot abuses an expensive API endpoint.
The waiver applies automatically to every project using Vercel Firewall and no configuration is required.
Learn how to implement WAF rules in the firewall documentation.
— Originally published at vercel.com
Want this in your inbox every morning?
Daily brief at your local 8am — bilingual EN/中文, free.
More from Vercel AI
See more →
The Agent Stack
The Agent Stack by Vercel AI provides essential building blocks for creating production-grade agents, enabling seamless integration across multiple AI models and secure operations. It features components like AI Gateway for model routing, Workflow SDK for durable execution, and Vercel Connect for scoped access, streamlining agent development and deployment across various platforms.
