Vercel Review 2026: Pricing, Flat Rate CDN, Limits and Spend Caps Explained

Verdict: the smoothest Git-to-production platform, if you watch the meter

Vercel is still the easiest way to ship a modern frontend or full-stack JavaScript app. Preview deployments on every push, zero-config framework detection, Fluid compute and a large first-party toolbox (Blob, Global Config, Workflows, Sandbox, AI Gateway) make the developer experience hard to beat.

The catch is that almost everything above the included allowances is metered, and the rates on the pricing page are the cheapest-region starting prices. Flat Rate CDN on Pro takes much of the surprise out of bandwidth bills, but compute, builds, image optimization, seats and add-ons are still billed per unit. Teams that set a spend amount and switch on pausing get a predictable bill; teams that do not can still be surprised.

Plans and pricing in October 2026

Vercel sells three plans. Prices are in USD and exclude VAT.

• Hobby - $0 per month. Personal, non-commercial use only. Includes 1M CDN requests and 100 GB of Fast Data Transfer a month, 4 hours of Fluid Active CPU, 360 GB-hrs of provisioned memory and 1M function invocations.
• Pro - $20 per month platform fee. Covers 1 deploying team seat and $20 of monthly usage credit. Extra Owner or Member seats are $20 per month each; Viewer seats with read-only access are free and unlimited. Includes Flat Rate CDN with spike protection, advanced spend management, cold start prevention and a free custom domain.
• Enterprise - custom pricing. Adds multi-region compute and failover, a 99.99% SLA, the OWASP managed firewall ruleset and higher limits.

Pro is a hybrid of a seat price and a usage price. A three-person team that deploys is paying $60 a month in seats before any usage beyond the $20 credit. The credit does not roll over: it expires at the end of the month if you do not use it and resets at the start of the next one.

Paid teams also get one free first-year domain on .app, .dev, .online, .site, .space, .store, .tech or .website. Trial teams do not.

The Pro trial

New teams can try Pro for 14 days with $20 in credits. There is one Pro trial per user account. The trial is capped at 10 team members, 200 projects, 16 CPU-hrs of Active CPU, 1,440 GB-hrs of provisioned memory and 1,000,000 function invocations, and it ends after 14 days or when those limits are exceeded, whichever comes first. If the trial ends and you have not set a payment method, you are not charged.

Flat Rate CDN: what the $20 actually includes

Flat Rate CDN became generally available for Pro teams on 8 September 2026. New Pro teams have it on by default; existing teams can switch in Billing settings. Instead of paying per GB and per request, you pick a capacity tier.

• Included with Pro - 1M CDN requests and 1 TB of data transfer a month.
• $20 per month - 10M requests and 50 TB.
• $100 per month - 50M requests and 50 TB.
• $300 per month - 150M requests and 50 TB.

Note the request count. Base Pro includes 1M CDN requests, the same number as Hobby; the bigger difference is transfer (1 TB versus 100 GB). Older guides that say Pro includes 10M requests describe a pricing model that no longer applies; 10M is now the first paid tier.

Spike protection is the main selling point. Traffic above your tier's capacity is served normally and is not billed, subject to Vercel's fair use guidelines. If you consistently exceed the highest tier, Vercel moves you to on-demand pricing. Flat Rate CDN is not meant for bulk file distribution or media-heavy delivery.

On-demand rates for everything else

Everything outside Flat Rate CDN is metered. The figures below are the starting rates from Vercel's pricing page, which are the cheapest-region prices. Vercel prices usage across 19 regions, and the most expensive regions cost noticeably more: Fast Data Transfer ranges from $0.15 to $0.35 per GB and Active CPU from $0.128 to $0.221 per hour.

• CDN without Flat Rate - Fast Data Transfer from $0.15 per GB, CDN requests from $2.00 per 1M, Fast Origin Transfer from $0.06 per GB.
• Fluid compute - Active CPU from $0.128 per hour, provisioned memory from $0.0106 per GB-hr, function invocations from $0.60 per 1M.
• Builds - per minute on Pro: Basic $0.007, Standard $0.014, Enhanced $0.028, Turbo $0.105, Elastic $0.0035 per CPU minute. New teams use Elastic build machines by default.
• Image Optimization - 5K transformations included, then from $0.05 per 1K; cache reads $0.40 per 1M; cache writes $4 per 1M.
• ISR - 1M reads and 200K writes included, then from $0.40 per 1M reads and $4 per 1M writes.
• Blob - 1 GB storage included, then $0.023 per GB; simple operations $0.40 per 1M; advanced operations $5 per 1M.
• Global Config - 100K reads and 100 writes included, then from $3 per 1M reads and $1 per 100 writes.
• Workflows - 50K events included, then $20 per 1M events. Queues (beta) - 1M included, then from $0.60 per 1M.
• Sandbox - 5 hours of Active CPU included, then from $0.128 per hour; up to 10K concurrent sandboxes on Pro.

Pro add-ons

Several team features cost extra on Pro: SAML SSO $300 per month, HIPAA BAA $350 per month, Password Protection $20 per protected project per month, Flags Explorer $250 per month, Preview Deployment Suffix $100 per month, Static IPs $100 per project per month plus private data transfer, Observability Plus $1.20 per 1M events, Web Analytics Plus $10 per month and Speed Insights Plus $10 per project per month plus $0.65 per 10,000 events. A team that needs SSO and a BAA adds $650 a month before usage.

Databases are not first-party. Postgres, Redis and similar stores are provisioned through Vercel Marketplace partners such as Neon, each with its own pricing.

How far the free Hobby plan goes

Hobby is generous for side projects, but it has two hard rules. First, it is restricted to non-commercial personal use. Running ads, building an affiliate-first site, taking payments or being paid to build the site all count as commercial and require Pro or Enterprise. Asking for donations does not.

Second, Hobby never bills you. When a project exceeds the included free usage, it is paused, and you wait until 30 days have passed to use that feature again. You cannot buy additional usage on Hobby.

• Projects - 200 on Hobby, unlimited on Pro.
• Deployments per day - 100 on Hobby, 6,000 on Pro.
• Function max duration - 300 seconds on Hobby; 300 seconds by default on Pro, configurable up to 800 seconds (up to 1,800 seconds in beta).
• Builds - 2 vCPU and 8 GB on Hobby with 1 concurrent build; 4 up to 30 vCPU on Pro. Build time is capped at 45 minutes per deployment.
• Firewall - 3 custom WAF rules and 3 IP blocks on Hobby, 40 rules and 100 IP blocks on Pro.
• Runtime logs - kept for 1 hour on Hobby and 1 day on Pro.
• No team collaboration and no email support on Hobby; one Hobby team per account.

Spend management: the $200 budget is not a cap

Every new team gets a default on-demand usage budget of $200, which you can change, with email, web and SMS notifications at 50%, 75% and 100%. This is the part most often misunderstood.

Setting a spend amount does not stop usage on its own. On Pro and Enterprise, reaching 100% does not stop deployments automatically. To stop costs above the amount, you have to turn on Pause Production Deployments. Even then, there are gaps worth knowing:

• The check runs every few minutes, so projects can keep accruing usage for several minutes past the amount.
• Pausing does not stop AI Gateway API key usage or v0 usage, and storage keeps billing.
• Seats, Marketplace products and add-ons sit outside the spend amount.
• Visitors to a paused project see a 503 DEPLOYMENT_PAUSED error, and projects do not unpause automatically when you raise the amount.

Features and frameworks

Vercel detects and builds Next.js, Nuxt, SvelteKit, Nitro, Turborepo, TanStack Start, FastAPI and more. Every Git push gets a preview deployment with its own URL, which is the feature most teams end up depending on for review and QA.

Fluid compute is Vercel's serverless model for Node.js and Python. It reuses instances with optimized concurrency, pre-warms functions on production deployments and fails over across regions and availability zones. You pay for active CPU time rather than for idle wall-clock time spent waiting on I/O, which suits AI and API workloads that spend most of a request waiting.

What Ship 2026 added

Vercel's Ship 2026 event ran in London, Berlin, New York, Sydney and San Francisco. At the final stop on 15 October, Vercel announced Python GA, Vercel Drives, Daemons in public beta and Vercel for Enterprise. Drives and Daemons are new enough that we have not evaluated them for this review.

AI Gateway, v0 and Vercel Agent

AI Gateway routes requests to many model providers through one API. Vercel charges no markup and no platform fee on tokens, includes $5 of free usage a month, and supports bring-your-own-key on the paid tier.

v0, Vercel's AI app builder, lives at v0.app and is billed separately. The free plan allows 7 messages a day, Plus includes $30 of monthly credits per user and Business is $100 per user per month. Vercel Agent, in beta, costs $0.25 per million tokens plus pass-through token cost.

Remember that neither AI Gateway key usage nor v0 usage is stopped by pausing production deployments, so give them their own limits.

Security, compliance and the April 2026 incident

Vercel holds a SOC 2 Type 2 attestation for Security, Confidentiality and Availability, is ISO 27001:2022 certified, has PCI DSS SAQ-D and SAQ-A attestations, supports GDPR through standard contractual clauses and lists EU-U.S. DPF and TISAX. A HIPAA BAA is available as a $350 per month Pro add-on. Automated DDoS mitigation is included on every plan, and BotID basic checks are free with Deep Analysis at $1 per 1,000 checks.

What happened in April 2026

According to Vercel's bulletin, the incident began with a compromise of Context.ai, a third-party AI tool used by a Vercel employee, which the attacker used to take over that employee's account. A limited subset of customers had non-sensitive environment variables exposed, meaning variables that decrypt to plaintext. Vercel contacted affected customers, recommended immediate credential rotation and validated that its npm packages were not compromised.

Vercel says all remediation actions were complete and the incident was closed on 16 October 2026. The practical lesson for customers: mark secrets as sensitive in project settings so they cannot be read back as plaintext, and rotate anything that was stored as a non-sensitive variable. Deleting a project does not rotate its credentials.

Uptime SLA

Only Enterprise carries an SLA: 99.99% availability, with service credits of 10% below 99.99%, 25% below 99% and 50% below 95%. You must claim in writing within 30 days. Hobby and Pro have no SLA listed.

Pros and cons

Pros

• Best-in-class Git workflow with a preview deployment for every push.
• First-class Next.js support from the framework's own maintainers, plus Python GA.
• Flat Rate CDN with spike protection makes bandwidth costs predictable on Pro.
• Fluid compute bills active CPU rather than idle time.
• AI Gateway with no markup on tokens.
• Strong compliance list: SOC 2 Type 2, ISO 27001:2022, PCI DSS, HIPAA BAA option.

Cons

• Hobby is non-commercial only, so any monetized site needs Pro.
• Pro charges $20 per deploying seat, so costs scale with team size.
• Many metered line items, and quoted rates are cheapest-region starting prices.
• The $200 spend budget only notifies unless you enable pausing, and pausing does not cover AI Gateway, v0, storage, seats or add-ons.
• SSO and HIPAA are expensive add-ons on Pro; no SLA below Enterprise.
• Fees are non-refundable, and the April 2026 incident is a reminder to treat environment variables carefully.

Who should use Vercel

• Solo developers and hobby projects - Hobby is excellent, as long as the site is not commercial.
• Small product teams on Next.js - Pro is good value if you keep the deploying seat count low and use free Viewer seats for reviewers.
• Content and marketing sites with spiky traffic - Flat Rate CDN's spike protection is a real advantage.
• Media-heavy delivery or bulk downloads - look elsewhere; Flat Rate CDN excludes them and on-demand transfer is costly.
• Regulated companies needing SSO, an SLA and a BAA - budget for Enterprise or for $650 a month in Pro add-ons.

Frequently asked questions

How much does Vercel Pro cost?

$20 per month, which includes 1 deploying seat and $20 of usage credit. Each additional Owner or Member seat is $20 per month, Viewer seats are free, and usage beyond the credit is billed on demand. The credit expires at the end of each month.

Can I use the free Hobby plan for a business site?

No. Hobby is for non-commercial personal use only. Ads, affiliate-first sites, taking payments or being paid to build the site all require Pro or Enterprise. Asking for donations is allowed.

What happens if I go over the Hobby limits?

Your project is paused rather than billed. You wait until 30 days have passed to use that feature again, and Hobby cannot buy extra usage.

Does the $200 spend budget stop my bill at $200?

Not by default. It only sends notifications unless you enable Pause Production Deployments. Even with pausing on, checks run every few minutes, and AI Gateway, v0, storage, seats, Marketplace and add-ons keep billing.

How much bandwidth does Vercel Pro include?

With Flat Rate CDN, base Pro includes 1M CDN requests and 1 TB of data transfer a month. Paid tiers go to 10M, 50M or 150M requests with 50 TB for $20, $100 or $300 a month, and spikes above the tier are not billed under fair use.

Is there a free trial of Vercel Pro?

Yes. Pro has a 14-day trial with $20 in credits, one per user account. It ends early if you exceed the trial limits, and you are not charged if no payment method is set.

Can I get a refund or cancel Vercel Pro?

Fees are non-refundable except where Vercel's terms say otherwise, such as Vercel terminating your account without cause. You can cancel or downgrade to Hobby by contacting Vercel Support, effective at the start of the next renewal period.

Was my data affected by the April 2026 Vercel security incident?

Only a limited subset of customers had non-sensitive environment variables exposed, and Vercel contacted them directly. Vercel says npm packages were not compromised and closed the incident on 16 October 2026. Rotating any credentials stored as non-sensitive variables is still sensible.

Does Vercel offer an uptime SLA?

Only on Enterprise, at 99.99% availability with service credits of 10% to 50%. Hobby and Pro have no SLA listed.

Key takeaways

• Pro is $20 per month per deploying seat and includes $20 of monthly usage credit that does not roll over.
• Flat Rate CDN, on by default for new Pro teams since September 2026, includes 1M requests and 1 TB, with unbilled spikes under fair use.
• Hobby is free but non-commercial only, and it pauses rather than bills when you hit limits.
• The $200 default spend budget is a notification, not a cap - enable Pause Production Deployments and limit AI Gateway and v0 separately.
• Quoted usage rates are cheapest-region prices; some regions cost more than twice as much for data transfer.
• The April 2026 incident exposed non-sensitive env vars for a limited set of customers and is now closed - mark secrets as sensitive.