proomt

Search

Search posts, papers, and topics

All posts

VercelBrandon Tuttle1 min readrelease notesintro

Full Sandbox egress firewall now available on Hobby plan

Read on vercel.com

Summary

Vercel added full Sandbox egress firewall capabilities to the Hobby plan, letting you define allow/deny network policies and attach secrets to outbound requests. You can configure policies via code or the Sandbox CLI, reducing data exfiltration risk for low‑cost projects.

  • Full Sandbox egress firewall is now available on Vercel's Hobby plan.
  • Network policies can be defined with allow, deny, or custom rules scoped by domain, path, method, query, or headers.
  • Secrets can be attached to outbound requests, enabling authenticated calls without exposing tokens in code.
  • Both code (networkPolicy object) and the Sandbox CLI can configure and update policies live without restarting.

Developers on the free tier can now enforce egress controls and protect secrets, improving security for hobby and experimental workloads.

4/10
devopssecuritysandboxnetworking

Related reading

  1. Vercel Sandbox now supports Devin Outposts

    Vercel Sandbox adds support for Devin Outposts, letting each AI agent session run in an isolated microVM with snapshot state and firewall controls. Teams can deploy via a provided quickstart and get automatic credential handling.

    Vercelvercel.com1 minrelease

  2. Vercel WAF for Blob is now generally available

    Vercel has made its Web Application Firewall for Blob storage generally available. It lets you add edge‑evaluated IP, country, and path rules to block or rate‑limit traffic to stored objects without changing code, helping cut unwanted bandwidth and costs.

    Vercelvercel.com1 minrelease

  3. Run Terminal-Bench and other Harbor evals on Vercel Sandbox

    Vercel now supports running Harbor benchmarks, like Terminal‑Bench, inside its Sandbox using Firecracker microVMs. The integration with AI Gateway lets you benchmark multiple models by swapping the `--model` flag, scaling concurrency with `--n-concurrent`.

    Vercelvercel.com1 minrelease

  6. Next.js 16.3 support on Vercel

    Vercel added full support for Next.js 16.3, bringing leaner prefetching, immutable static assets, and faster route metadata handling. Early adopters see up to 45% fewer prefetches, 24% less static traffic, and roughly 2× faster routing at scale.

    Vercelvercel.com4 min