Firewall‑mitigated traffic is free on Vercel

Vercel announced that traffic mitigated by its Web Application Firewall (WAF) will not count toward customer billing, reducing costs for users who experience DDoS attacks or other malicious traffic. This change means customers are only charged for legitimate traffic that reaches their applications, while blocked malicious requests incur no fees. The update aims to make Vercel's security features more accessible and cost-effective for all users.

Source: Vercel Blog | 2026-05-18