The security section of the Vercel REST API allows you to programmatically interact with some of the functionality of the Vercel Firewall such as creating a system bypass rule and updating your Vercel WAF rule configuration.

You can use the REST API programmatically as follows:

• Install the Vercel SDK and use the security methods.
• Call the endpoints directly and use the security endpoints.

To define firewall rules in code that apply across multiple projects, you can use the Vercel Terraform provider.

After setting up Terraform, you can use the following rules:

• vercel_firewall_config
• vercel_firewall_bypass

Learn how to use some of these endpoints with specific examples for the Vercel WAF.

• Challenge cURL requests
• Challenge cookieless requests on a specific path
• Deny non-browser traffic or blocklisted ASNs
• Deny traffic from a set of IP addresses
• Vercel Firewall Terraform configuration