Vercel Firewall is now fully manageable from the command line. The new `vercel firewall` CLI command exposes five capabilities: custom rules, IP blocks, system bypass rules, attack mode, and system mitigations (DDoS). No dashboard required.

The practical value is in the workflow shift. Firewall configuration moves into version control, scripts, and CI pipelines alongside the code it protects. Vercel also ships a Firewall skill for AI agents via skills.sh, with documented best practices for safely rolling out new rules without breaking production traffic.

Update to the latest Vercel CLI and run `vercel firewall` to start. The full changelog covers the command structure and rollout guidance, which is worth reading if you manage rules across multiple projects or environments.

[READ ORIGINAL →]