Vercel Deployment Protection Bypass

If your origin is hosted on Vercel and you are using PerfectSearch's DNS proxy mode, Vercel's deployment protection may block proxied requests with a browser verification challenge. This guide explains why it happens and how to configure a bypass secret so bot traffic reaches your origin without interference.

What is Vercel Deployment Protection?

Vercel Deployment Protection is a security feature that shows a “Verifying your browser...” challenge page to verify that incoming requests are from real browsers, not automated systems. It is enabled by default on preview deployments and can be enabled on production deployments. The challenge uses JavaScript-based browser verification that automated systems and proxies cannot solve.

Why does it block proxied traffic?

When PerfectSearch's DNS proxy forwards requests to your Vercel origin, Vercel sees these requests as coming from an automated system rather than a direct browser visit. This triggers the deployment protection challenge. Since the proxy and bots cannot execute the JavaScript challenge, the request fails and bots receive the verification page instead of your actual content.

• DNS proxy forwards requests to your Vercel .vercel.app origin
• Vercel detects the request as automated or proxied
• Vercel returns the “Verifying your browser...” challenge page
• The proxy cannot solve the challenge, so the request fails

How do I set up the bypass secret?

Vercel provides a “Protection Bypass for Automation” feature that generates a secret token. When this token is included in a request, Vercel skips the browser verification challenge. Configure the bypass by following these five steps to connect your Vercel project with PerfectSearch.

1. Open Vercel project settings— Go to your Vercel project → Settings → Deployment Protection
2. Enable bypass for automation— Under “Protection Bypass for Automation”, toggle the feature on. Vercel will generate a unique secret token.
3. Copy the secret — Copy the generated bypass secret. This is a long random string that acts as an authentication token.
4. Paste in PerfectSearch— In the PerfectSearch dashboard, navigate to your site → Settings → Vercel Bypass. Paste the secret into the field and click Save.
5. Verify the setup — Use the Visibility Test tool to confirm that bots can now reach your origin content through the proxy without hitting the verification challenge.

Does this affect security?

No. The bypass secret is only used by PerfectSearch's proxy when forwarding requests to your Vercel origin. Human visitors continue to see normal Vercel deployment protection behavior. The secret is stored encrypted in PerfectSearch's database and is never exposed to end users or included in responses. Only the proxy server uses the secret when making origin requests.