Usage & Pricing for Vercel WAF

Learn how the Vercel WAF can affect your usage and how specific features are priced.
Table of Contents

Vercel Firewall features that are available under all plans, are free to use. This includes DDoS mitigation, IP blocking, and custom rules. Vercel WAF plan-specific features such as rate limiting and managed rulesets are priced as described in priced features.

Although you are not charged for Firewall features available under all plans, you may incur Edge Requests (ER) and incoming Fast Data Transfer (FDT) charges as described below.

FeatureERFDTNote
WAF custom ruleChargedChargedWhen a custom rule is active, you incur usage for every challenged or denied request.
WAF custom rule with persistent actionsNot chargedNot chargedAs the requests are now blocked before being processed by the firewall, they do not count towards usage.
DDoS mitigationNot chargedNot chargedReview Do I get billed for DDoS? for an explanation.
Attack Challenge ModeNot chargedNot chargedWhen attack challenge mode is turned on, requests that do not pass the challenge will not count towards usage.
Account level IP BlockingNot chargedNot chargedRequests originating from these blocked IP addresses do not count towards usage.
Project level IP BlockingChargedChargedThis falls under custom rules.

Enterprise only features are priced as described below.

Select a Region
Managed Infrastructure pricing
Resource
Measurement Metric
Price

WAF Rate Limiting

Rate limiting allows you to control the number of times that a request from the same origin can hit your application within a specific timeframe

1,000,000 Allowed Requests$0.50
Select a Region
Managed Infrastructure pricing
Resource
Measurement Metric
Price

OWASP CRS per request number

OWASP Top Ten is a managed ruleset of predefined WAF rules

1,000,000 Inspected Requests$0.80

OWASP CRS per request size

This may be charged for some requests where the payload (header + body) of the request is excessively large

1 GB of inspected request payload$0.20
Last updated on October 2, 2024