Vercel WAF upgrade brings persistent actions, rate limiting, and API control

This post introduces three new enhancements to Vercel's Web Application Firewall (WAF): persistent actions to block repeat offenders for a customizable duration, rate limiting to set request limits on specific endpoints and prevent API abuse, and a Firewall API for programmatic control of WAF settings. It also highlights the instant rule propagation (300ms) across the Edge Network and the extension of the Challenge page to the broader Vercel Firewall. Persistent actions allow edge requests to be processed earlier, bypassing usage metrics and WAF evaluation. Rate limiting can be configured per-endpoint and broadly, with layered checks. The Firewall API enables automation of security workflows and integration with third-party intelligence feeds.