Security Settings

Pro Plan

Configure security features to protect your Vercel projects from threats.

Vercel Firewall

Configure firewall settings to protect against malicious attacks [^1]

Your projects are protected by Vercel's multi-layered firewall system.

DDoS Mitigation

Automatically block abnormal or suspicious levels of traffic [^2]

Web Application Firewall (WAF)

Custom protection strategies with rules and IP blocking [^2]

Bot Protection

Identify and block malicious bot traffic

Attack Challenge Mode

Challenge suspicious requests with CAPTCHA or JS tests

Blocked IP Addresses

Enter one IP address or CIDR range per line (e.g., 192.168.1.1 or 192.168.1.0/24)

Rate Limiting (requests per minute)

Custom Firewall Rules

Create custom rules to protect against specific threats [^3]

Rule Name

Condition

Action

Status

Block SQL Injection

URI contains SQL keywords

Block

Active

Rate Limit API

Path starts with /api/

Rate Limit

Active

Block Suspicious User Agents

User agent matches pattern

Block

Active

Geo-blocking

Country not in allowlist

Block

Inactive