Vercel launches vercel-firewall CLI for firewall management and agent skills
TL;DR
Vercel launches vercel-firewall CLI to manage rules, IP blocks, bypasses, attack mode, and mitigations. The firewall skill enables safe rule rollouts for agents.
What changed
Vercel introduced CLI commands to manage the Firewall. The vercel firewall command handles custom rules, IP blocks, system bypasses, attack mode, and system mitigations. A Firewall skill lets agents interact with these features using rollout best practices.
Why it matters
Developers gain terminal-based control over firewall settings without dashboard switches. Netlify users manage edge security via functions, but Vercel now offers direct CLI firewall parity. This speeds secure deployments for Next.js apps.
What to watch for
Compare Vercel CLI firewall against Cloudflare Wrangler for edge rules. Update to latest CLI via vercel --version, then run vercel firewall list to verify commands. Monitor agent skill adoption in Vercel deployments.
Who this matters for
- Vibe Builders: Use the new CLI firewall commands to secure your project deployments without leaving the terminal.
- Developers: Integrate firewall management into your CI/CD pipelines to automate rule updates and system mitigations.
Harsh’s take
Vercel is finally closing the gap between dashboard configuration and terminal workflows. Moving firewall management into the CLI is a logical step for teams that treat infrastructure as code. This update removes the friction of manual UI clicks during high pressure deployment windows.
It forces a more disciplined approach to security by allowing developers to version control their firewall rules alongside their application logic. However, the real test is how these agent skills handle complex rule conflicts. While the CLI provides parity with the dashboard, the risk of misconfiguration increases when security policies are managed via scripts.
Teams should prioritize testing these commands in staging environments before pushing to production. This is a functional upgrade that rewards developers who prefer terminal speed over GUI navigation.
by Harsh Desai
About Vercel
View the full Vercel page →All Vercel updatesMore from Vercel
- FeatureVercel launches Trusted Sources to secure your deployments
Vercel introduces Trusted Sources, letting protected deployments accept short-lived OIDC tokens from authorized Vercel projects and external services instead of long-lived secrets. Callers attach tokens in the x-vercel-trusted-oidc-idp-token header for Vercel to verify signatures and claims.
- Model ReleaseVercel AI Gateway adds fast mode for Claude Opus 4.7 in preview
Vercel AI Gateway releases fast mode for Claude Opus 4.7 in research preview. It generates output tokens 2.5x faster with full model intelligence.
- FeatureVercel Sandbox firewall adds request proxying and filtering
Vercel updated Sandbox firewall to support proxying specific HTTP requests to a user-controlled server. Matchers enable scoping forwarding and credentials brokering to targeted requests.