Vercel WAF for Blob is now generally available

Vercel WAF for Blob is now generally available and supported for production use on all plans, with existing beta rules carrying over unchanged. The firewall protects Blob stores with custom rules that can deny, challenge, or rate limit requests based on IP, country, and path, evaluated at the edge to prevent unwanted traffic from reaching the store or generating bills. Users can enable protection via the Blob store's Settings tab, connecting to a dedicated team-wide project for firewall rules.

Vercel WAF for Blob is now generally available and supported for production use on all plans. If you protected a store during the beta https://vercel.com/changelog/vercel-waf-for-blob-is-now-in-beta , nothing has changed: your rules and setup carry over exactly as they are. Vercel WAF https://vercel.com/docs/vercel-firewall/vercel-waf protects a Blob store with custom rules https://vercel.com/docs/vercel-firewall/vercel-waf/custom-rules , the same kind you use to guard your deployments. Rules that match on properties like IP address, country, and path can deny, challenge, or rate limit requests to your stored objects. This requires no changes to your code, your blob URLs, or how you use @vercel/blob . Rules are evaluated at Vercel's edge, so a denied request is turned away before any data transfer occurs. Unwanted traffic to AI-generated media, user uploads, or paid downloads never reaches your store and never generates a bill. To enable protection, open your Blob store's Settings tab https://vercel.com/d?to=%2F%5Bteam%5D%2F~%2Fstores%2Fblob%2F%5Bstore%5D%2Fsettings , and in the Firewall section select Protect your store , then Enable firewall. This connects the store to a dedicated team-wide project where your Blob firewall rules live, shared by every store you protect. Read the Blob security documentation https://vercel.com/docs/vercel-blob/security firewall-and-waf-integration to protect a store.