Vercel security roundup: improved bot defenses, DoS mitigations, and insights
May 23, 2025

Summary
This post details the introduction of Bot Filter, a managed WAF ruleset for challenging non-browser bot traffic, and Protectd, an update to DoS mitigation infrastructure that significantly accelerates Layer 7 attack mitigation with a median mitigation time of 2.5 seconds. It also highlights proactive vulnerability management for open-source frameworks like React Router, Remix, and Next.js middleware, and introduces firewall usability improvements such as IP enrichment and the OR operator for rule conditions.