Vercel WAF for Blob, Now Generally Available

Vercel WAF for Blob is now generally available and can be used in production environments on all plans. Blob stores that had protection configured during the beta period will keep their existing rules and configuration.

Vercel WAF protects Blob stores using the same custom rules used to protect deployments. You can deny requests, apply a challenge, or set rate limits based on IP address, country, path, and more, without needing to change your code, Blob URLs, or how you use @vercel/blob.

Rules are evaluated at the Vercel edge, so denied requests are blocked before any data is transferred. This means unwanted traffic targeting AI-generated media, user uploads, and paid downloads never reaches your store and incurs no cost.

Protection can be enabled by going to the Settings tab of your Blob store, selecting Protect your store in the Firewall section, and clicking Enable firewall. Blob firewall rules for all protected stores are stored in a dedicated project shared across the team.