Vercel Web Application Firewall's Bot Protection managed ruleset is now generally available for all users, at no additional cost.
Bot Protection helps reduce automated traffic from non-browser sources and allows you to respond based on two action choices:
Log Only Action: Logs identified bot traffic in the Firewall tab without blocking requests
Challenge Action: Serves a browser challenge to traffic from non-browser sources. Verified bots are automatically excluded
During the beta period, Bot Protection challenged over 650 million requests of potential non-browser requests.
Bot Protection complements Vercel's existing mitigations, which already block common threats like DDoS attacks, low quality traffic, and spoofed traffic. It adds an extra layer of protection for any automated traffic that is not clearly malicious.
Learn more about the Bot Protection managed ruleset and the Vercel Firewall. If you'd like your bot to be verified as well, head over to bots.fyi.