Web Application Firewall mitigated traffic is free on Vercel
Vercel has announced that it will waive CDN requests and fast data transfer fees for traffic that is denied, challenged, or rate-limited by its Web Application Firewall. This change ensures that users will not incur unexpected charges when dealing with malicious traffic, such as scrapers or botnets. The waiver is automatically applied to all projects using the Vercel Firewall, requiring no additional configuration.
- ▪Vercel Firewall now waives fees for denied, challenged, or rate-limited traffic.
- ▪Users will not pay for requests or bandwidth that the firewall blocks.
- ▪The waiver applies automatically to every project using Vercel Firewall.
Vercel Blog files mainly under programming. We currently carry 13 of its stories.
Story provenance
Source · retrieval · rights · ranking — open for full record
inspect →
Story provenance
Attribution is not the same as permission. This drawer separates discovery metadata, excerpts, WeSearch-generated summaries, reuse status, and whether the publisher receives the visit. Nothing here claims a legal grant the publisher has not made.
Record
| Original publisher | Vercel Blog |
| Canonical URL | https://vercel.com/changelog/web-application-firewall-mitigated-traffic-is-free-on-vercel |
| Publication time | 2026-05-18T20:00:00.000Z |
| Retrieval time | 2026-05-18T19:34:56.983Z |
| Last seen | 2026-05-18T19:34:56.983Z |
| Headline source | Publisher (no WeSearch rewrite) |
| Excerpt source | publisher body |
| Excerpt method | First ~120 words (~800 chars) of extracted publisher body, fair-use limited. |
| Summary | WeSearch · cerebras-chat (WeSearch summarizer) |
| Summary source text | contentText |
| Citation coverage | Summary is a WeSearch-generated derivative; primary citation is the original publisher URL. |
| Cluster | raoRYBzim6b_ |
| Cluster logic | Grouped by semantic title/content similarity across sources within a rolling window. Same-publisher template collisions are excluded from coverage comparison. |
| Ranking reason | Story pages are not engagement-ranked. Hub feeds use recency, with optional source-diversified chronological ordering (cap consecutive stories per source). No personalized ranking. |
| Publisher visit | Yes — open original |
| Substitutes article? | No — link-out required for full text |
Rights status (four layers)
WeSearch handling by dimension
| Indexing | May the item be indexed (stored, ranked, made findable)? | Allowed |
| Snippet | May a short excerpt of the publisher's text be shown? | Allowed |
| AI summary | May WeSearch generate its own short summary of the article? | Limited |
| Retrieval / RAG | May the content be exposed for third-party retrieval-augmented generation? | Not asserted |
| Model training | May the content be used to train AI models? | Not asserted |
| Commercial reuse | May the content be reused commercially? | Not permitted |
Basis: Derived from the published RSS/Atom feed. Contact: [email protected]. Reviewed: 2026-07-24.
Opening excerpt (first ~120 words) tap to expand
1 min readCopy URLMay 18, 2026Vercel Firewall now waives CDN Requests and Fast Data Transfer for any traffic Web Application Firewall rules deny, challenge, or rate-limit.Vercel has always provided unlimited DDoS mitigation at no cost. Vercel Web Application Firewall, included in CDN cost, gives you custom rules, managed rules, and rate limiting for bad traffic that isn't DDoS. With this change, you don't pay for requests or bandwidth that Vercel Firewall denies, challenges, or rate-limits. That means no surprise bill when a scraper hammers your product pages, a credential-stuffing botnet hits your login route, or a bot abuses an expensive API endpoint.The waiver applies automatically to every project using Vercel Firewall and no configuration is required.
…
Excerpt limited to ~120 words for fair-use compliance. The full article is at Vercel Blog.
Discussion
0 commentsMore from Vercel Blog
