Summary
Vercel made WAF for Blob generally available, letting teams protect Blob stores with WAF custom rules in production on all plans. The move extends Vercel's web application firewall from front-end routes to its object-storage layer.
What changed
Vercel WAF for Blob moved from preview to general availability. Custom WAF rules can now be applied to Blob stores for production use, available on all plans.
Why it matters
Object stores holding user uploads and generated assets are a common abuse and exfiltration vector. Bringing custom WAF rules to Blob at GA lets teams enforce access and rate controls at the storage edge without a separate proxy, closing a gap between Vercel's compute and storage security posture.
Evidence excerpt
Protect Blob stores with WAF custom rules, now supported for production use on all plans.