Doorman
DocsRule BuilderGet StartedGitHub
Doorman

Multi-provider WAF automation as code. Define a rule once, enforce it everywhere, review it in a pull request.

Product

  • Docs
  • Rule Builder
  • Getting Started

Providers

  • Vercel
  • Cloudflare
  • Fastly
  • Google Cloud Armor

Resources

  • GitHub
  • npm package
  • Example configs
  • Report an issue

© 2026 griffen.codes

System status: ● Operational· Doorman v3.15.4

    For Vercel

    Doorman for Vercel Firewall

    Doorman's original, stable provider. The default when no provider is specified, and the only one doorman init scaffolds a config for directly.

    npm install -g @gfargo/doorman

    Vercel is the default provider, no --provider flag needed.

    No translation step

    Vercel gets the rule as-is. It's doorman's native format, so there's nothing to translate and nothing to lose in the round trip.

    doorman init just works

    The only provider where init scaffolds a real, connected config directly. Every other provider starts from a hand-authored file.

    The full action set

    Vercel Firewall supports deny, challenge, bypass, rate_limit, redirect, and log, everything doorman manages outside Enterprise-only managed rule sets.

    Environment variables

    export VERCEL_TOKEN="..."
    export VERCEL_PROJECT_ID="..."
    export VERCEL_TEAM_ID="..."  # optional

    Nothing set yet? Doorman prompts you for credentials the first time it needs them.

    Then ship
    doorman sync
    Full Vercel setup guideSee all providers