Vercel BotID is now generally available
Vercel just shipped an invisible CAPTCHA powered by ML. Here's why it matters for AI apps.
Why it matters
Vercel's BotID GA launch addresses a critical infrastructure gap for AI-heavy applications—protecting high-value endpoints (checkouts, LLM APIs, chat interfaces) from sophisticated bot attacks using ML-driven behavioral analysis rather than traditional IP/heuristic blocking. For founders shipping AI products, this is table-stakes security infrastructure.
The key facts
13 to knowBotID uses ML to collect thousands of behavioral signals distinguishing humans from bots
Targets high-value routes: checkouts, signups, AI chat interfaces, LLM-powered endpoints, public APIs
Client-side detection via component + server-side verification via checkBotId function
Powered by Kasada technology integration
Firewall dashboard filtering by verdict, user agent, country, IP, request path, JA4 digest, host
Mutates detections on every page load to evade reverse engineering
Generally available as of June 25, 2025
BotID is a new Vercel protection layer for public routes
Powered by machine learning signal collection and mutation
Designed specifically for AI chat interfaces and LLM-powered endpoints
Includes client-side detection and server-side verification
Integrates with Vercel Firewall dashboard with filtering by verdict, user agent, country, IP, path, JA4 digest
Now generally available (GA status)
Go to the source
Vercel Blogvercel.com
Publisher excerpt: Vercel BotID is an invisible CAPTCHA with no visible challenges or manual bot management required. BotID is a new protection layer on Vercel designed for public, high-value routes such as checkouts, signups, AI chat interfaces, LLM-powered endpoints, and public APIs that are targets for…