# OPTIONS Allowlist

**Published:** May 21, 2024 | **Authors:** Kit Foster, Brooke Mosby, Kevin Rupert

---

The OPTIONS Allowlist improves the security of deployments on Vercel by limiting CORS preflight `OPTIONS` requests to specified paths.

Before the OPTIONS Allowlist, all `OPTIONS` requests to deployments bypassed Deployment Protection in compliance with [CORS specifications](https://developer.mozilla.org/docs/Web/HTTP/CORS).

The new OPTIONS Allowlist feature is available on all plans.

Learn more about the [OPTIONS Allowlist](https://vercel.com/docs/security/deployment-protection/methods-to-bypass-deployment-protection/options-allowlist).

---

📚 **More updates:** [View all changelog entries](/changelog/sitemap.md) | [Blog](/blog/sitemap.md)