SafeLine is a self-hosted WAF(Web Application Firewall) / reverse proxy to protect your web apps from attacks and exploits.
Repository Index
47,133 repositories indexed
1–21 of 21 · Most stars
The easiest, and most secure way to access and protect all of your infrastructure.
- ssh
- go
- bastion
- teleport-binaries
Open-source IDS/IPS, WAF and bot detection for Linux, Windows, Docker and Kubernetes, with a crowdsourced blocklist of malicious IPs.
🏔 Love Freedom - ❌ Block Mass Surveillance
Digging Deeper....
- incident-response
- forensics-investigations
- inventory-management
- endpoint-security
Security sensor for realtime threat detection and protection
CSRF protection middleware for Go.
- csrf
- go
- security
- middleware
Secure Vault for Customer PII/PHI/PCI/KYC Records
- gdpr
- pii
- piidata
- security
Package gorilla/csrf provides Cross Site Request Forgery (CSRF) prevention middleware for Go web applications & services 🔒
- csrf-protection
- gorilla
- middleware
- golang
Protect against malicious open source packages 🤖
An extensible framework for application-level data management on Kubernetes, Kanister is a Cloud Native Computing Foundation sandbox project and was originally created by the Veeam Kasten team.
- data-protection
- golang
- kubernetes
- cloud-native
A local AI gateway for AI agents, unifying your subscriptions and API providers with smart routing and on-device privacy protection.
- ai-gateway
teler-waf is a Go HTTP middleware that protects local web services from OWASP Top 10 threats, known vulnerabilities, malicious actors, botnets, unwanted crawlers, and brute force attacks.
- ids
- teler
- waf
- teler-ids
Pakkero is a binary packer written in Go made for fun and educational purpose. Its main goal is to take in input a program file (elf binary, script, even appimage) and compress it, protect it from tampering and intrusion.
- launcher
- payload
- elf
- elf-binaries
🍍Jeff provides the simplest way to manage web sessions in Go.
- golang
- sessions
- http
- session-management
A Go implementation of in-toto. in-toto is a framework to protect software supply chain integrity.
- in-toto
- software-supply-chain
- security
CetusGuard is a tool that protects the Docker daemon socket by filtering calls to its API endpoints.
Cardea is an SSH bastion server with access control, session recording, and optional TPM-backed key protection.
- audit
- bastion
- firewall
- networking
Simple ELF runtime packer for creating self-protecting binaries
Local-first automation Agent & deterministic workflow engine — the secure control layer between AI and your data. Data stays local. Connect your own LLM / files / notes / databases via Connector API. ReAct reasoning · DAG/WAL/Saga/idempotent execution · MCP · offline-capable.
proxy to prevent dangerous queries getting to influxdb