diff --git a/tests/deploy-config.test.mjs b/tests/deploy-config.test.mjs
index ca35378b4..832344319 100644
--- a/tests/deploy-config.test.mjs
+++ b/tests/deploy-config.test.mjs
@@ -63,7 +63,7 @@ describe('deploy/cache configuration guardrails', () => {
 });
 
 const getSecurityHeaders = () => {
-  const rule = vercelConfig.headers.find((entry) => entry.source === '/(.*)');
+  const rule = vercelConfig.headers.find((entry) => entry.source === '/((?!docs).*)');
   return rule?.headers ?? [];
 };
 
diff --git a/vercel.json b/vercel.json
index 4632b4108..d3c1d5887 100644
--- a/vercel.json
+++ b/vercel.json
@@ -25,7 +25,7 @@
       ]
     },
     {
-      "source": "/(.*)",
+      "source": "/((?!docs).*)",
       "headers": [
         { "key": "X-Content-Type-Options", "value": "nosniff" },
         { "key": "X-Frame-Options", "value": "SAMEORIGIN" },