Vercel Web Application Firewall (WAF) now supports persistent actions to block repeat offenders who trigger firewall rules.

These persistent actions enforce specific responses—such as blocking—against clients for a defined period, ranging from 1-60 minutes. While active, these actions prevent unnecessary processing by blocking requests earlier in their lifecycle, reducing edge request load.

You can apply persistence to existing rules for actions like deny, challenge, and rate-limiting, adding an extra layer of control to your firewall logic.

Learn more about persistent actions.

Vercel Web Application Firewall (WAF) rate limiting is now generally available, giving you precise control over request volumes to your applications.

With over 15 parameters, including target path, headers, method, and cookies, you can define the business logic for rate limiting. Then, apply a rate-limiting algorithm tied to IP, JA4 digest, headers, or user agent to control the frequency of matching traffic within your set limits.

When paired with persistent actions, rate limiting can help reduce resource abuse across Edge Requests, Middleware, Data Transfer, and Function execution.

Rate limiting with a fixed-window algorithm is available today for Pro customers, with an additional token-bucket algorithm available to Enterprise customers. Pricing for rate limiting is regional starting at $.50 per 1 million allowed requests.

Add rate limiting using a template or read the rate limiting documentation to learn more.

We're beginning to roll out new Observability capabilities which will give enhanced insights into your application's performance and behavior in the Vercel dashboard.

This will provide detailed analytics across functions, data transfer, caching, and API requests to bring further observability to Vercel's framework-defined infrastructure.

New insights include:

• Vercel Functions and external API requests: Monitor function behavior and external requests, including invocations, durations, and error rates.

• Vercel Edge Network: Track data transfer, ISR usage, and edge requests with detailed insights into cache success, revalidations, and geo-based performance.

Observability is now available in limited beta for existing Monitoring customers. Access it directly from your Vercel project’s new Observability tab.

For advanced platform observability, explore our integrations with Sentry, Datadog, Honeycomb, and more.