Bot Protection is now in public beta
Vercel's Web Application Firewall now includes a Bot Protection managed ruleset in public beta, helping reduce automated traffic from non-browser sources with configurable actions including log-only and challenge modes. This complements existing threat mitigations and can be customized with bypass rules to avoid disrupting legitimate automated traffic.
Vercel Web Application Firewall now includes a new , available in for all users.Bot Protection managed rulesetpublic beta
Bot Protection helps reduce automated traffic from non-browser sources and allows you to respond based on two action choices:
To avoid disrupting legitimate automated traffic that's not already covered by Verified Bots, you can configure using the bypass action for specific requests.custom WAF rules
To enable the ruleset:
Bot Protection complements Vercel's existing mitigations, which already block common threats like DDoS attacks, low quality traffic, and spoofed traffic. It adds an extra layer of protection for any automated traffic that is not clearly malicious.
During this public beta period, we’ve set up a on the Vercel Community where you can share your feedback, feature requests, and experiences with Bot Protection.thread
Learn more about the and the Edit: During the beta period, we renamed the Bot Filter managed ruleset to Bot ProtectionBot Protection managed rulesetVercel Firewall.
Logs identified bot traffic in the Firewall tab without blocking requestsLog Only Action:
Serves a to traffic from non-browser sources. are automatically excludedChallenge Action:browser challengeVerified bots
In your , navigate to the tab and select project dashboardFirewall Configure
Under , navigate to Bot ManagementBot Protection
Select or Log Challenge
Select and review the changes to be appliedReview Changes
Select to apply the changes to your production deploymentPublish
Source: original entry ↗
More from Vercel
Follow Vercel to get its new changes in your feed and email digest.
OpenAI Decisions API now available on AI Gateway
OpenAI's Decisions API is now accessible through Vercel's AI Gateway with an OpenAI-compatible endpoint, enabling decision models to answer typed questions and return probabilities, choices, and scores for routing, triage, and guardrails use cases. Support is available across the OpenAI SDK, AI SDK, HTTP API, and CLI with the latest versions.
Timestamp attributes now supported in Vercel Flags
Vercel Flags now supports timestamp attributes for entities, allowing you to create time-based targeting rules. Use this feature to run limited-time campaigns, show content between specific dates, or target users based on registration date.
Glyph Cluster now available in stealth on AI Gateway
Glyph Cluster, a reasoning model for coding and long-context analysis, is now available as a stealth model on Vercel's AI Gateway for Pro and Enterprise plan teams with purchased AI Gateway credits at no cost during the stealth period. The model supports function calling, streams responses, and can be accessed via AI SDK, OpenAI-compatible APIs, and coding agents.