Vercel WAF for Blob is now generally available
By Steven Van ·
Vercel WAF for Blob is now generally available and supported for production use on all plans.
Vercel WAF for Blob has moved out of beta and is now supported for production use on all plans. Stores that were already protected during the beta keep their existing rules and setup exactly as they are.
The firewall protects a Blob store with the same custom rules used to guard deployments: rules matching on properties like IP address, country, or path can deny, challenge, or rate limit requests to stored objects, with no changes needed to code, blob URLs, or how @vercel/blob is used. Rules are evaluated at Vercel's edge, so a denied request is turned away before any data transfer occurs, meaning unwanted traffic to AI-generated media, user uploads, or paid downloads never reaches the store and never generates a bill.
To enable protection, open a Blob store's Settings tab, go to the Firewall section, and select Protect your store, then Enable firewall. This connects the store to a dedicated team-wide project where its Blob firewall rules live, shared by every store that's protected. Read the full announcement.
