Vercel's Bot Protection stops malicious bots in a single click

Introduces the Bot Protection managed ruleset, a new security layer integrated with the Vercel WAF. This feature uses heuristics-based detection to distinguish between browser-based (human) and non-browser (bot) traffic with zero configuration. It allows requests from real browsers and verified bots (including project cron jobs and API calls from Vercel Functions) and can issue challenges to non-browser clients like `curl` or unwanted scrapers. The ruleset is maintained by Vercel, and a public beta feedback thread is available. The post also mentions future plans for deeper observability, more granular control over bots, an SDK, and runtime capabilities.