Examples

WAF Examples

Example	Category	Template
Suspicious traffic in specific countries	Custom Rule
Emergency redirect	Custom Rule
Limit abuse with rate limiting	Custom Rule
Block AI bots	Managed Ruleset
Block `.php` requests	Custom Rule
Block traffic from a specific IP address	IP Blocking
Challenge `cURL` requests	Firewall REST API
Challenge cookieless requests on a specific path	Firewall REST API
Deny non-browser traffic or blocklisted ASNs	Firewall REST API
Deny traffic from a set of IP addresses	Firewall REST API

Last updated August 11, 2026

Cross-link map: WAF Examples (/docs/vercel-firewall/vercel-waf/examples)

From the Vercel docs graph (built 2026-10-15T05:50:43.280Z), spanning vercel.com docs + KB, nextjs.org, ai-sdk.dev, and other Vercel documentation sites. Full graph as JSON: https://vercel.com/docs/graph.json

Semantically closest pages

Vercel WAF — Learn how to secure your website with the Vercel Web Application Firewall \(WAF\)
Deny non-browser traffic or blocklisted ASNs — Learn how to block traffic from known threats with the Vercel WAF API.
Challenge cURL requests — Learn how to challenge curl requests with the Vercel WAF API.
Vercel Firewall — Learn how Vercel Firewall helps protect your applications and websites from malicious attacks and unauthorized access.
Challenge cookie-less requests on a specific path — Learn how to challenge specific requests with the Vercel WAF API.

This page links to (13)

Update Attack Challenge mode — POST /v1/security/attack-mode — Update the setting for determining if the project has Attack Challenge mode enabled.
WAF Custom Rules — Learn how to add and manage custom rules to configure the Vercel Web Application Firewall \(WAF\).
WAF IP Blocking — Learn how to customize the Vercel WAF to restrict access to certain IP addresses.
WAF Managed Rulesets — Learn how to use WAF Managed Rulesets with the Vercel Web Application Firewall \(WAF\)
Block PHP requests — Learn how to block traffic looking for .php vulnerabilies.
Challenge cookie-less requests on a specific path — Learn how to challenge specific requests with the Vercel WAF API.
Challenge cURL requests — Learn how to challenge curl requests with the Vercel WAF API.
Deny non-browser traffic or blocklisted ASNs — Learn how to block traffic from known threats with the Vercel WAF API.
Deny traffic from a set of IP addresses — Learn how to block specific IP addresses with the Vercel WAF API.
Emergency Redirect — Learn how to implement an emergency redirect without re-deploying your site.
Limit Abuse with Rate Limiting — Learn how to protect your authentication endpoints against abuse.
Protect Sensitive Routes with Vercel WAF: Challenge and Deny Rule Recipes — Use Vercel WAF custom rules to block or challenge unwanted traffic by country, ASN, IP address, user agent, path, or coo
Blocking traffic from a specific IP address. — Learn how to block traffic from a specific IP address.

Pages that link here (4)

By site: vercel-kb (1) · vercel-docs (3)

From vercel-kb

Protect Sensitive Routes with Vercel WAF: Challenge and Deny Rule Recipes — Use Vercel WAF custom rules to block or challenge unwanted traffic by country, ASN, IP address, user agent, path, or coo

From vercel-docs

Bot Management — Learn how to manage bot traffic to your site.
Redirects — Learn how to use redirects on Vercel to instruct Vercel's platform to redirect incoming requests to a new URL.
WAF Custom Rules — Learn how to add and manage custom rules to configure the Vercel Web Application Firewall \(WAF\).

WAF Managed Rulesets

Usage & Pricing

Was this helpful?