The Vercel Web Application Firewall (WAF) has been enhanced with a new feature called Bot Protection, which provides better controls for fine-tuning application security. This managed ruleset is free for all users on all plans and allows developers to protect their applications from bot attacks with a single click. Bot Protection uses a heuristics-based detection approach that distinguishes between browser-based traffic (human) or non-browser based (likely bot) traffic, while also integrating with the WAF. The feature is ideal for legitimate services like AI and SEO bots, and can be used to restrict access to human users and Vercel-verified bots. Developers are encouraged to enable Bot Protection in Log-Only Mode first to gain visibility into their app's traffic and bot sources before switching to active enforcement.