# Vercel WAF for Blob is now generally available

**Published:** August 3, 2026 | **Authors:** Agustin Falco | **Contributors:** Kevin Sundstrom

---

Vercel WAF for Blob is now generally available and supported for production use on all plans. If you protected a store [during the beta](https://vercel.com/changelog/vercel-waf-for-blob-is-now-in-beta), nothing has changed: your rules and setup carry over exactly as they are.

[Vercel WAF](https://vercel.com/docs/vercel-firewall/vercel-waf) protects a Blob store with [custom rules](https://vercel.com/docs/vercel-firewall/vercel-waf/custom-rules), the same kind you use to guard your deployments. Rules that match on properties like IP address, country, and path can deny, challenge, or rate limit requests to your stored objects. This requires no changes to your code, your blob URLs, or how you use `@vercel/blob`.

Rules are evaluated at Vercel's edge, so a denied request is turned away before any data transfer occurs. Unwanted traffic to AI-generated media, user uploads, or paid downloads never reaches your store and never generates a bill.

![Light mode WAF blob](//images.ctfassets.net/e5382hct74si/1wSg82jXbEKt55Qd2kptmz/d70dd3226697bd9a21c0c4ffb4d688f6/509df9dc-518f-4407-b9ca-ce0a677d5573.png)

To enable protection, open your [Blob store's Settings tab](https://vercel.com/d?to=%2F%5Bteam%5D%2F~%2Fstores%2Fblob%2F%5Bstore%5D%2Fsettings), and in the Firewall section select **Protect your store**, then Enable firewall. This connects the store to a dedicated team-wide project where your Blob firewall rules live, shared by every store you protect.

Read the [Blob security documentation](https://vercel.com/docs/vercel-blob/security#firewall-and-waf-integration) to protect a store.

---

📚 **More updates:** [View all changelog entries](/changelog/sitemap.md) | [Blog](/blog/sitemap.md)