Web Application Firewall control now available with vercel.json
Vercel embeds AI-native security: agents can now auto-generate WAF rules via vercel.json.
Why it matters
Vercel is lowering the friction for AI agents to author and deploy security rules declaratively. This is an infrastructure play that makes it easier for LLM-based code generation tools to handle security configuration at scale, reducing manual security toil for developers.
The key facts
9 to knowWAF control now available in vercel.json alongside dashboard, API, and Terraform
Agents can use code-generating prompts to author WAF rules
Enhanced matchers support headers, rewrites, redirects, routes
Matching includes: string equality/inequality, regex, prefixes/suffixes, array inclusion/exclusion, numeric comparisons
Declarative approach enables structured rule injection into projects
Explicitly designed for agents to author rules via code-generating prompts
Enhanced matchers: string equality, regex, prefixes/suffixes, array inclusion, numeric comparisons
Supports more expressive conditions across headers, rewrites, redirects, and routes
Published July 9, 2025
Go to the source
Vercel Blogvercel.com
Publisher excerpt: You can now control Vercel’s Web Application Firewall (WAF) actions directly in , alongside existing support in the dashboard, API, and terraform.vercel.json This approach provides a structured way for both developers and agents to declaratively define and push rules to projects. Agents can use…
