Vercel WAF for Blob is now generally available
Vercel WAF for Blob is now generally available for production use on all plans, allowing you to protect blob stores with custom rules that match on IP address, country, path, and more. Rules are evaluated at Vercel's edge to deny, challenge, or rate-limit requests before data transfer occurs, preventing unwanted traffic and unnecessary billing.
Vercel WAF for Blob is now generally available and supported for production use on all plans. If you protected a store , nothing has changed: your rules and setup carry over exactly as they are.during the beta
protects a Blob store with , the same kind you use to guard your deployments. Rules that match on properties like IP address, country, and path can deny, challenge, or rate limit requests to your stored objects. This requires no changes to your code, your blob URLs, or how you use .Vercel WAFcustom rules@vercel/blob
Rules are evaluated at Vercel's edge, so a denied request is turned away before any data transfer occurs. Unwanted traffic to AI-generated media, user uploads, or paid downloads never reaches your store and never generates a bill.
To enable protection, open your , and in the Firewall section select , then Enable firewall. This connects the store to a dedicated team-wide project where your Blob firewall rules live, shared by every store you protect.Blob store's Settings tabProtect your store
Read the to protect a store.Blob security documentation
Source: original entry ↗