Decloak is an AI-powered web security intelligence platform that scans a site's HTTP/TLS posture, JavaScript, and third-party scripts to produce a report anyone can read. This guide is part of Decloak's library of practical, source-backed security guidance.
In this guide
- Key takeaways
- How much does the free Hobby plan let me do?
- What exactly do I pay for on the Pro plan?
- When should I consider Enterprise and what does it cost?
- How does Vercel charge for usage beyond the included quotas?
- Quick comparison of the three plans
- How to avoid unexpected costs on Pro
- Should I switch plans as my project grows?
- How can I keep my Vercel app secure and where does Decloak fit?
Key takeaways
- Hobby is free forever but caps at 1 M edge requests, 100 GB fast data transfer, and 1 GB Blob storage.
- Pro costs $20 per user per month, includes a $20 usage credit, then charges pay - as - you - go for extra edge requests, data transfer, and CPU.
- Enterprise pricing is custom; you must contact sales for limits, SLAs, and dedicated support.
How much does the free Hobby plan let me do?
The Hobby plan costs nothing and never expires. It gives you 1 M edge requests, 100 GB of fast data transfer, and 1 GB of Blob storage per month. You also get unlimited preview deployments, automatic CI/CD, a global CDN, a basic WAF, DDoS mitigation, and basic analytics. If you stay within those caps you will never see a bill.
What exactly do I pay for on the Pro plan?
Pro is priced at $20 per user per month and comes with a $20 usage credit that is applied automatically each month. After the credit is exhausted you pay per - usage:
- $2 for each additional 1 M edge requests.
- $0.15 per extra GB of fast data transfer.
- $0.128 per hour of active CPU. The plan also raises the included limits to 10 M edge requests, 1 TB fast data transfer, and Blob storage at $0.023 per GB. In addition you get faster builds (no queues), team seats, advanced spend management, and cold - start prevention.
When should I consider Enterprise and what does it cost?
Enterprise pricing is not listed publicly; you must contact Vercel sales for a quote. The offering includes custom limits, 99.99 % uptime SLAs, dedicated support, multi - region compute, managed WAF rule sets, SCIM/Directory sync, and all Pro features. If your organization needs guaranteed performance, compliance contracts, or a dedicated account manager, Enterprise is the appropriate choice.
How does Vercel charge for usage beyond the included quotas?
Both Hobby and Pro plans have hard caps for free usage. When you exceed a cap on the Pro plan, Vercel bills the overage at the rates listed above. Hobby users simply stop receiving service for the exceeded resource; there is no automatic overage billing. Monitoring your usage in the Vercel dashboard lets you avoid surprise charges.
Quick comparison of the three plans
| Plan | Monthly price | Included edge requests | Included fast data transfer | Included Blob storage | Key extra features |
|---|---|---|---|---|---|
| Hobby | Free | 1 M | 100 GB | 1 GB | Unlimited previews, basic WAF, DDoS mitigation |
| Pro | $20 per user | 10 M | 1 TB | $0.023/GB | Faster builds, team seats, spend management, cold - start prevention |
| Enterprise | Custom | Custom | Custom | Custom | Dedicated support, 99.99 % SLA, multi - region compute, SCIM sync |
How to avoid unexpected costs on Pro
- Set budget alerts in the Vercel dashboard to warn you when you approach the $20 credit limit.
- Review the usage breakdown daily during high - traffic events.
- Enable cold - start prevention only for critical functions to keep active CPU time low.
- Archive or delete unused Blob objects to stay under storage limits.
Should I switch plans as my project grows?
Start with Hobby if you are prototyping or have low traffic. When you consistently hit the 1 M edge request cap or need team collaboration, move to Pro. If you require custom SLAs, higher throughput, or dedicated security controls, contact Vercel sales for Enterprise. Migrating between plans is a simple setting change in the Vercel dashboard and does not require code changes.
How can I keep my Vercel app secure and where does Decloak fit?
Secure your Vercel deployment by enabling the built - in WAF, enforcing strict Content - Security - Policy headers, and turning on HTTP strict transport security (HSTS) with a max - age of at least six months. Regularly audit third - party scripts with a tool like Decloak; the free scan runs core checks including HTTP/TLS posture, static HTML analysis, rendered - page network behaviour, JavaScript CVE detection, tag manager intelligence, third - party domain mapping, vibe - coded platform security, and an AI - written executive summary in about 15 seconds. Decloak will flag exposed service_role keys, publicly readable Supabase tables, and other misconfigurations that the Vercel platform does not automatically protect. Run a Decloak free scan on your live URL after each major deployment to get a graded, shareable report and address any new findings before they become a risk.
All pricing details are taken from Vercel’s official pricing page as of 2024 - 09 - 24.
Related guides
Is Vercel just AWS? A detailed breakdown
Vercel runs on AWS hardware but adds its own edge network, fluid compute, and managed services, creating a higher - level platform. Learn how Decloak can monitor this stack for security gaps.
Why is Vercel so popular?
Vercel’s popularity comes from its zero - config preview workflow, deep Next.js integration, global edge network, freemium model and AI - native tooling that together give developers instant, fast, and frictionless deployments.
How to use `vercel deploy` safely and efficiently
Learn the exact command options, best practices, and automation tips for the Vercel CLI `vercel deploy` command.