telexed ~ c / 60be4232-608radar:90 · infra_saasLIVE
← back
NO.
#60be4232
Topic
INFRA & SAAS
Source
vercel_blog
Published
2026-05-18 20:00:00
Importance
★ 9/10 — radar 90
`Vercel` stops charging for WAF-mitigated traffic
FIG-0601:1

`Vercel` stops charging for WAF-mitigated traffic

Blocked bots no longer turn into surprise CDN bills. This directly lowers the risk of scrapers, credential stuffing, and abused API endpoints on small apps.

[ KEY POINTS ]
  1. Traffic denied, challenged, or rate-limited by Vercel Firewall now waives CDN Requests and Fast Data Transfer charges.
  2. DDoS mitigation was already unlimited and free; this change covers non-DDoS abuse handled by custom rules, managed rules, and rate limits.
  3. The waiver applies automatically to every project using Vercel Firewall; no config change or migration required.
  4. Product pages, login routes, and expensive API endpoints are the obvious places to add stricter rules now.
Originalvercel.com/changelog/web-application-firewall-mitigated-traffic-is-free-on-vercelRead original →

// related