Vercel WAF for Blob is now in beta

Short summary

Vercel's Web Application Firewall now supports Blob stores in beta, applying existing deployment rules (deny, challenge, rate limit) to blob traffic with no code changes. Rules evaluate at the edge on IP, country, and path, and setup is a single dashboard toggle. OWASP Core Ruleset is not supported since it targets dynamic app traffic, not object delivery.

• •WAF rules (deny, challenge, rate limit) now apply to Vercel Blob stores with no code changes — toggle in dashboard
• •Rules evaluate at the edge matching IP, country, and path; OWASP Core Ruleset not supported for object delivery
• •One shared rule set covers all protected stores on a team; per-store scoping not available during beta

Generated with AI, which can make mistakes.