Create Vercel Firewall rules with natural language
By Steven Van ·
Vercel Firewall generates WAF custom rules from a plain-language description, in the dashboard or via the CLI.
Vercel Firewall custom rules can now be created by describing the behavior in plain language instead of building the logic manually. In the dashboard, typing something like "rate limit all API requests to 50 per minute per IP, and block subsequent requests for 5 minutes if exceeded" generates the rule. The same works from the CLI with vercel firewall rules add --ai "...".
WAF custom rules can log, block, challenge, rate limit, or redirect requests based on conditions like IP address, path, country, or user agent. The Vercel Firewall documentation gives examples such as logging requests to /api/webhook with a missing authorization header, blocking all requests to /wp-admin, and challenging /checkout traffic that doesn't come from the US.