Verified webhook providers—including Stripe and PayPal—are now automatically allowed in Attack Challenge Mode, ensuring uninterrupted payment processing. Well-behaved bots from major search engines, such as Googlebot, and analytics platforms are also supported. Vercel are now exempt from challenges when running in the same account. Like other trusted internal traffic, they bypass Attack Challenge Mode automatically.Cron Jobs To block specific known bots, create that matches their User Agent.

Known bots are validated to be authentic and cannot be spoofed to bypass Attack Challenge Mode.a custom rule Learn more about and how .Attack Challenge ModeVercel maintains its directory of legitimate bots Read more