Ideas for building
better software.

Wednesday, May 14, 2025 Security Releases

Gateway - Domain Categories improvements

New categories added Parent IDParent NameCategory IDCategory Name 1Ads66Advertisements 3Business & Economy185Personal Finance 3Business & Economy186Brokerage & Investing 21Security Threats187Compromised Domain 21Security Threats188Potentially Unwanted Software 6Education189Reference 9Government & Politics190Charity and Non-profit Changes to existing categories Original NameNew Name ReligionReligion & Spirituality GovernmentGovernment/Legal RedirectURL Alias/Redirect Refer to Gateway domain

Hyperdrive - Hyperdrive achieves FedRAMP Moderate-Impact Authorization

Hyperdrive has been approved for FedRAMP Authorization and is now available in the FedRAMP Marketplace. FedRAMP is a U.S. government program that provides standardized assessment and authorization for cloud products and services. As a result of this product update, Hyperdrive has been approved as an authorized service to be used by U.S. federal agencies at the Moderate Impact level. For detailed information regarding FedRAMP and its implications, please refer to the official FedRAMP documentatio

Stream - Introducing Origin Restrictions for Media Transformations

We are adding source origin restrictions to the Media Transformations beta. This allows customers to restrict what sources can be used to fetch images and video for transformations. This feature is the same as --- and uses the same settings as --- Image Transformations sources. When transformations is first enabled, the default setting only allows transformations on images and media from the same website or domain being used to make the transformation request. In other words, by default, request

Improving Hugging Face Model Access for Kaggle Users

Updated v0 pricing

We’re updating how pricing works in . Usage is now metered on input and output tokens which convert to credits, instead of fixed message counts.v0 This gives you more predictable pricing as you grow and increases the amount of usage available on our free tier. Existing v0 users will transition to the new pricing at the start of your next billing period. New users will start on the improved pricing today. Read more

Proxied responses now cacheable via CDN-Cache-Control headers

Vercel’s CDN, which can proxy requests to external backends, now caches proxied responses using the and headers. This aligns caching behavior for external backends with how Vercel Functions are already cached.CDN-Cache-ControlVercel-CDN-Cache-Control This is available starting today, on all plans, at no additional cost. Per the Targeted HTTP Cache Control spec (), these headers support standard directives like and , enabling fine-grained control over CDN caching without affecting browser cach

New one-click AI bot managed ruleset

You can now block AI crawlers and scrapers like GPTBot (OpenAI), ClaudeBot (Anthropic), PerplexityBot, Bytespider (ByteDance), and others with a single toggle using the AI bot managed ruleset. Now available for free on all plans. The ruleset is managed by Vercel and updates automatically as new crawlers appear, with no additional action required. This protection operates with zero latency impact to legitimate traffic. For more complete coverage, combine with to catch AI bots that attempt to spo