SafeLine is a self-hosted WAF(Web Application Firewall) / reverse proxy to protect your web apps from attacks and exploits.

security hackers api-gateway captcha firewall waf xss bruteforce self-hosted cybersecurity sql-injection vulnerability application-security web-security cve appsec web-application-firewall http-flood blueteam websecurity

• Updated Nov 11, 2026
• Go

Open-source IDS/IPS, WAF and bot detection for Linux, Windows, Docker and Kubernetes, with a crowdsourced blocklist of malicious IPs.

docker kubernetes security firewall blocklist waf cybersecurity intrusion-detection web-security intrusion-prevention anti-bot modsecurity web-application-firewall bot-detection threat-intelligence waap bot-protection ids-ips

• Updated Nov 10, 2026
• Go

🛡️ Open-source and cloud-native Web Application Firewall (WAF)

letsencrypt docker nginx kubernetes security devops hosting waf reverse-proxy cybersecurity swarm web-security hardening modsecurity dnsbl web-application-firewall devsecops antibot waap security-tuning

• Updated Nov 12, 2026
• Python

Everything about Web Application Firewalls (WAFs) from Security Standpoint! 🔥

security awesome firewall waf infosec awesome-list web-application-firewall waf-test bypass-waf waf-detection waf-bypass waf-testing waf-fingerprints

• Updated Nov 2, 2026
• Python

WAFW00F allows one to identify and fingerprint Web Application Firewall (WAF) products protecting a website.

waf fingerprint waffit web-application-firewall

• Updated Apr 19, 2026
• Python

OWASP Coraza WAF is a golang modsecurity compatible web application firewall library

go golang http waf owasp modsecurity hacktoberfest web-application-firewall coraza coraza-waf owasp-crs coreruleset

• Updated Nov 12, 2026
• Go

Detect and bypass web application firewalls and protection systems

firewall detection waf web-application fingerprinting bypass web-application-firewall web-application-firewall-bypassing

• Updated Aug 11, 2024
• Python

An open-source project in Golang to asess different API Security tools and WAF for detection logic and bypasses

security waf owasp bugbounty web-application-firewall security-tools web-application-security security-testing graphql-security api-security rest-security grpc-security

• Updated Oct 28, 2026
• Go

open-appsec is a machine learning security engine that preemptively and automatically prevents threats against Web Application & APIs. This repo include the main code and logic.

nginx kubernetes rate-limiting waf owasp kong application-security appsec web-application-firewall security-tools owasp-top-ten devsecops api-security nginx-proxy-manager threat-prevention

• Updated Sep 6, 2026
• C++

Industry-leading free, high-performance, AI and semantic technology Web Application Firewall and API Security Gateway (WAAP) - UUSEC WAF.

letsencrypt security ddos api-gateway waf xss owasp sql-injection application-security modsecurity web-application-firewall data-mask hips rasp api-security waap web-security-gateway uuwaf uusec-waf uusec

• Updated Nov 8, 2026
• Shell

Check Risk WAF is an all-in-one Web Application Firewall with Anti-Bot and Anti-DDoS protection at L3, L4, and L7. Available on-premises or as SaaS, it protects web apps against OWASP Top 10 attacks, CWE vulnerabilities, botnets, and DoS/DDoS. Free and unlimited for everyone, forever for personal, non-commercial use.

security firewall rate-limiting http-proxy waf load-balancer owasp web-application reverse-proxy infosec web-security anti-bot web-application-firewall ip-blacklist anti-ddos security-tools websecurity application-gateway geo-blocking ip-filtering

• Updated Oct 15, 2026

Handy, High performance, ModSecurity compatible Nginx firewall module & 方便、高性能、兼容 ModSecurity 的 Nginx 防火墙模块

nginx recaptcha captcha waf openresty modsecurity web-application-firewall nginx-modules modsecurity-nginx hcaptcha

• Updated Sep 26, 2026
• C

JANUSEC Application Gateway provides secure access, including reverse proxy, K8S Ingress Controller, Automatic ACME Certificate, WAF, 5-Second Shield, CC Defense, OAuth2 Authentication, Global Server Load Balance, and Cookie Compliance etc. JANUSEC应用网关，提供安全的接入，包括反向代理、K8S Ingress Controller、自动化ACME证书、WAF、5秒盾、CC防御、OAuth2身份认证、GSLB负载均衡与Cookie合规等。

golang security acme gateway waf sql-injection application-security web-application-firewall port-forwarding gslb web-application-security web-ssh cookie-banner application-gateway load-balance janusec-application-gateway janusec k8s-ingress-controller cookie-compliance

• Updated Jul 18, 2026
• Go

BlazeHTTP 是一款简单易用的 WAF 防护效果测试工具。BlazeHTTP stands as a user-friendly WAF protection efficacy evaluation tool.

benchmark waf http-parser bypass web-application-firewall waf-test

• Updated Jul 1, 2024
• Go

Caddy WAF (Regex Rules, IP and DNS filtering, Rate Limiting, GeoIP, Tor, Anomaly Detection)

rate-limiting waf owasp geoip2 caddy web-security rate-limiter web-application-firewall caddyserver ip-blacklist security-tools caddy-plugin dns-blacklist geo-blocking ip-filtering caddy-module dns-filtering caddy-security

• Updated Nov 3, 2026
• Go

A powerful PHP WAF for AWD

php waf ctf web-application-firewall awd awd-framework

• Updated Jul 7, 2024
• PHP

Web security protection system based on openresty

nginx web lua waf openresty cc web-application-firewall nginx-lua http-flood openwaf

• Updated Mar 30, 2021
• C

aawaf 是一款基于语义分析的Web应用防火墙

docker nginx security ddos captcha firewall acl waf xss ddos-attacks web-security modsecurity web-application-firewall http-flood ddos-protection security-tools sqli-injection cc-attack ddos-defense

• Updated Nov 5, 2026
• Go

Web application acceleration, advanced DDoS protection and web security

tls security web-performance database ddos bots high-performance http2 linux-kernel waf load-balancer web-security http-accelerator web-application-firewall ddos-protection

• Updated Nov 10, 2026
• C

Fast and light-weight API proxy firewall for request and response validation by OpenAPI specs.

api security api-gateway proxy firewall swagger openapi waf apigateway api-wrapper openapi-spec openapi-specification web-application-firewall security-tools web-application-security api-security rest-security api-firewall openapi-security api-waf

• Updated Apr 3, 2026
• Go