Vercel puts its web application firewall in front of Blob storage

Vercel opened a beta of WAF for Blob on 24 July 2026, letting teams deny, challenge and rate-limit traffic to blob storage with no code changes. The same day it added Claude Opus 5 to its AI Gateway with bring-your-own-key support, no markup on provider pricing and automatic failover.

What it means Object storage is the quiet soft spot in agent-built apps — uploads and generated artefacts land there, and the firewall used to stop at the edge of the application.