What problem does it solve? It guides safe configuration of Vercel's platform-level security controls—WAF custom rules, IP blocking, rate limiting, Attack Mode, and system bypass—without accidentally blocking real users, SEO crawlers, or checkout flows. ## Core Features & Use Cases - Custom WAF Rules: Create, edit, reorder, and stage rules with conditions on path, headers, geo, user agent, and JA4 fingerprints, with actions like deny, challenge, log, bypass, and rate_limit. - Staged Rollout Workflow: Enforces a log-first, preview-block, then production-block rollout so new rules are validated against real traffic before enforcement. - Attack Response & Mitigation: Covers Attack Mode for active attacks, system bypass for trusted IPs, IP blocks, and querying firewall metrics via vc metrics. - Use Case: When an API endpoint is being hammered by abusive clients, use this Skill to stage a rate-limit rule in log mode, review the traffic dashboard, then tighten and enforce it in production. ## Quick Start Ask the assistant to add a Vercel Firewall rule that rate limits your /api routes to 100 requests per minute per IP, staged in log mode first.
