# Create Vercel Firewall rules with natural language

DevFeed: [Create Vercel Firewall rules with natural language](<https://devfeed.tech/articles/create-vercel-firewall-rules-with-natural-language-881.md>)

Original publisher: [Read original article](<https://vercel.com/changelog/create-vercel-waf-custom-rules-using-natural-language>)

Author: Yash Kothari

Published: 2026-05-12T19:00:00Z

Content type: release

Language: en

Sources: [Vercel News](<https://devfeed.tech/sources/vercel-news.md>)

Topics: [Firewall](<https://devfeed.tech/topics/firewall.md>), [Vercel](<https://devfeed.tech/topics/vercel.md>), [Command-line interface](<https://devfeed.tech/topics/cli.md>), [dashboards](<https://devfeed.tech/topics/dashboards.md>), [Authorization](<https://devfeed.tech/topics/authorization.md>)

Tags: [authorization](<https://devfeed.tech/tags/authorization.md>), [checkout](<https://devfeed.tech/tags/checkout.md>), [cli](<https://devfeed.tech/tags/cli.md>), [documentation](<https://devfeed.tech/tags/documentation.md>), [firewall](<https://devfeed.tech/tags/firewall.md>), [generate](<https://devfeed.tech/tags/generate.md>), [ip](<https://devfeed.tech/tags/ip.md>), [logging](<https://devfeed.tech/tags/logging.md>), [us](<https://devfeed.tech/tags/us.md>), [vercel](<https://devfeed.tech/tags/vercel.md>)

## AI overview

Vercel Firewall now supports creating WAF custom rules from natural-language descriptions. The dashboard or Vercel CLI can generate rules that log, block, challenge, rate limit, or redirect requests based on conditions such as IP address, path, country, and user agent.

## Source excerpt

Vercel Firewall now lets you create WAF custom rules using natural language. Describe the behavior you need and the dashboard will generate the rule. Visit the firewall custom rules page to try creating a rate-limiting rule: Or use the Vercel CLI: WAF custom rules let you control traffic to your site by logging, blocking, challenging, rate limiting, or redirecting requests based on conditions like IP address, path, country, user agent, and more. For example, you can: Log all requests to /api/webhook with a missing authorization header Block all requests to /wp-admin Challenge all traffic to /checkout that doesn't come from the US Generate your first rule or learn more in the documentation. Read more