Vercel Firewall now lets you create WAF custom rules using natural language. Describe the behavior you need and the dashboard will generate the rule.

Visit the firewall custom rules page to try creating a rate-limiting rule:

Or use the Vercel CLI:

vercel firewall rules add --ai "Rate limit /api to 100 requests per minute by IP"

WAF custom rules let you control traffic to your site by logging, blocking, challenging, rate limiting, or redirecting requests based on conditions like IP address, path, country, user agent, and more.

For example, you can:

• Log all requests to /api/webhook with a missing authorization header

• Block all requests to /wp-admin

• Challenge all traffic to /checkout that doesn't come from the US

Generate your first rule or learn more in the documentation.