Cloud-deployed web applications face constant security threats, with attackers launching millions of malicious attacks weekly. Your application, users, and business require robust security measures to stay protected.
A comprehensive security strategy requires active protection, robust policies, and compliance frameworks:
- Security governance and policies ensure long-term organizational safety, maintain regulatory adherence, and establish consistent security practices across teams.
- A Multi-layered protection system provides active security against immediate threats and attacks.
Governance and policies
Learn about the protection and compliance measures Vercel takes to ensure the security of your data, including DDoS mitigation, SOC2 Type 2 compliance, Data encryption, and more.
A shared responsibility model is a framework designed to split tasks and obligations between two groups in cloud computing. The model divides duties to ensure security, maintenance, and service functionality.
Out of the box, Vercel serves every deployment over an HTTPS connection. Vercel automatically generates SSL certificates for these unique URLs free of charge.
Multi-layered protection
Understand how Vercel protects every incoming request with multiple layers of firewall and deployment protection. To restrict who can view your preview and production deployments, see the access control options: Password protection and Vercel Authentication.
Vercel firewall
Last updated August 11, 2026
Cross-link map: Vercel security overview (/docs/security)From the Vercel docs graph (built 2026-09-21T05:26:59.511Z), spanning vercel.com docs + KB, nextjs.org, ai-sdk.dev, and other Vercel documentation sites. Full graph as JSON: https://vercel.com/docs/graph.jsonSemantically closest pagesVercel Firewall — Learn how Vercel Firewall helps protect your applications and websites from malicious attacks and unauthorized access.CDN security — Learn how Vercel's CDN secures every request with HTTPS, TLS, DDoS mitigation, firewall protection, and security headersShared Responsibility Model — Discover the essentials of our Shared Responsibility Model, outlining the key roles and responsibilities for customers,Security settings — Configure security settings for your Vercel project, including Logs and Source Protection, Vercel Support Code VisibilitVercel security roundup: improved bot defenses, DoS mitigations, and insightsThis page links to (8)Encryption and TLS — Learn how Vercel encrypts data in transit and at rest.Access Control — Learn about the protection and compliance measures Vercel takes to ensure the security of your data, including DDoS mitiSecurity & Compliance Measures — Learn about the protection and compliance measures Vercel takes to ensure the security of your data, including DDoS mitiShared Responsibility Model — Discover the essentials of our Shared Responsibility Model, outlining the key roles and responsibilities for customers,DDoS Mitigation — Learn how the Vercel Firewall mitigates against DoS and DDoS attacksFirewall concepts — Understand the fundamentals behind the Vercel Firewall.Firewall Observability — Learn how firewall traffic monitoring and alerts help you react quickly to potential security threats.Vercel WAF — Learn how to secure your website with the Vercel Web Application Firewall \(WAF\)Pages that link here (7)By site: vercel-kb (1) · vercel-web (2) · vercel-docs (4)From vercel-kbHow to Utilize Vercel’s Bot Management Features — A practical, step-by-step guide to identifying unwanted automated traffic and securing your Vercel apps with Bot ProtectFrom vercel-webPCI compliance for ecommerceThe Frontend Cloud: Powering resiliency for global web applicationsFrom vercel-docsvercel security — Inspect the security posture of your Vercel team from the terminal: run every security check, list findings, and scope tVercel Enterprise Plan — Learn about the Enterprise plan for Vercel, including features, pricing, and more.Security Dashboard — The Security Dashboard aggregates the security posture of every account and project on your team, flags misconfigurationShared Responsibility Model — Discover the essentials of our Shared Responsibility Model, outlining the key roles and responsibilities for customers,
- An enterprise-grade platform-wide firewall available for free for all customers with no configuration required that includes automatic DDoS mitigation and protection against low quality traffic.
- A Web Application Firewall (WAF) that supports custom rules, managed rulesets, and allows customers to challenge automated traffic. You can customize the WAF at the project level.
- Observability into network traffic and firewall activity, including the access to firewall logs.
Can you trust our partners?
Previous
The Vercel firewall helps to protect your applications and websites from malicious attacks and unauthorized access through:
Networking
Was this helpful?
