components – Firewall

DDoS mitigation rules, and System bypasses

These are managed by Vercel and not configurable, however you can ensure that specific IP addresses or CIDR ranges are never blocked by the Vercel Firewall's system mitigations with System Bypass Rules.

System Bypass Rules

Configure the IP addresses and CIDRs that Vercel should block requests from. Requests will not contribute to your bill.

Bot Management

WAF Managed Rulesets

Danger Zone

Attack Mode

Challenge suspicious traffic with JavaScript verification to block automated attacks while allowing legitimate users.