Usage & Pricing for Vercel WAF
Vercel Firewall features available on all plans are free to use. This includes DDoS mitigation, IP blocking, and custom rules. Vercel prices plan-specific WAF features such as rate limiting and managed rulesets as described in priced features.
WAF deny, challenge, or rate-limit mitigated traffic does not incur CDN Requests or Fast Data Transfer (FDT). Requests that pass a challenge and continue to your application count toward normal usage.
The same applies to persistent actions, DDoS mitigation, Attack Mode, and IP blocking.
Priced WAF features are billed as described below.
Select a Region
Resource | Measurement Metric | Price |
|---|---|---|
WAF Rate Limiting | 1,000,000 Allowed Requests | $0.50 |
Select a Region
Resource | Measurement Metric | Price |
|---|---|---|
OWASP CRS per request number | 1,000,000 Inspected Requests | $0.80 |
OWASP CRS per request size | 1 GB of inspected request payload | $0.20 |
Last updated June 16, 2026
Was this helpful?