Clients blocked by persistent actions now receive a 403 Forbidden response
By Steven Van ·
Vercel WAF persistent actions now return an explicit 403 instead of a silent failure, so an intentional block is easy to tell apart from an error.
Clients blocked by a persistent action in the Vercel Web Application Firewall (WAF) now get a 403 Forbidden response. Before, the block failed silently. The change took effect on 28 January 2025.
The status code makes it clear that the connection is being intentionally denied. Persistent actions in the WAF help reduce edge request load and stop malicious traffic earlier, which cuts down unnecessary processing for your applications.
Vercel
The platform for frontend developers — deploy, preview, and scale web apps and AI agents with zero config.
View Vercel →