You can now drain Vercel Firewall actions to external providers through Log Drains.

Requests denied by the Vercel Firewall will be drained with the firewall source. This includes the following events:

• Requests blocked by a Custom Rule

• Requests blocked by Challenge Mode

• Requests blocked Managed Rules (e.g. OWASP CRS)

• Requests blocked by an IP Rule

If a rule is set to log or to bypass, requests will not be sent to Log Drains. Firewall actions are also surfaced inside of Monitoring.

Learn more about the Log Drains.