Repository Index

Industry-leading free, high-performance, AI and semantic technology Web Application Firewall and API Security Gateway (WAAP) - UUSEC WAF.

• waf
• application-security
• web-application-firewall
• modsecurity

The first open-source DDoS protection system

• dpdk
• ddos
• ddos-mitigation
• ddos-protection

Database security suite. Database proxy with field-level encryption, search through encrypted data, SQL injections prevention, intrusion detection, honeypots. Supports client-side and proxy-side ("transparent") encryption. SQL, NoSQL.

• encryption-server
• encryption
• crypto
• cryptography

Translatedapfree-wifidog is a high-performance captive portal solution that serves as a gateway between your wireless networks and the Internet. Optimized for both HTTP and HTTPS traffic, it ensures secure border control while enabling seamless user authentication and efficient network management. Buy the services in the link below to support my open source work.

• openwrt
• libevent
• c
• wifidog

Real-time network monitor + outbound firewall — see & block every connection. Privacy-first, local-first, Rust fleet agent, SIEM exports, 8 languages. / Moniteur réseau temps réel + pare-feu sortant, agent de flotte Rust, exports SIEM. 100 % local.

• cybersecurity
• d3js
• electron
• fastapi

Caddy Reverse Proxy Balancer and WAF WebUI

Open-source, auditable network gateway for homelabs, NAS and servers: DDNS, STUN traversal, port forwarding with SNI routing, reverse proxy and web server, ACME certificates, WAF, Tailscale, frp, Cloudflare Tunnel, Docker and web terminal in one binary. Runs on Docker, fnOS, OpenWrt, Linux, macOS and Windows.

• acme
• ddns
• frp
• golang

Firewall and Privatizing Proxy for Trackers, Attackers, Malware, Adware, and Spammers with Anti-Virus On-Demand and On-Access Scanning (PF, squid, privoxy, hphosts, dshield, emergingthreats, hostsfile, PAC file, clamav)

• proxy
• tracker
• firewall
• privacy-enhancing-technologies

teler-waf is a Go HTTP middleware that protects local web services from OWASP Top 10 threats, known vulnerabilities, malicious actors, botnets, unwanted crawlers, and brute force attacks.

• ids
• teler
• waf
• teler-ids

A rest application to update firewalld rules on a linux server

• firewalld
• firewalld-configuration
• golang
• rest-api

Defensive mitigation and testing toolkit for PHP security vulnerabilities (CVE-2026-109618, CVE-2026-109619, CVE-2026-115560), including Apache protections and PHP hardening guidance

• cybersecurity
• defenses
• patches
• php

Node Manager for VPN VDS

CetusGuard is a tool that protects the Docker daemon socket by filtering calls to its API endpoints.

• docker
• security
• container
• daemon

An EBPF based IPv4/IPv6 firewall with integrations for OpenZiti Zero-Trust Framework edge-routers and tunnellers

• ebpf
• ebpf-tc
• firewall
• ipv4

This library protects against typical web attacks. It was inspired in rack-protection Ruby gem.

• middlewares
• security
• http
• crystal

⛓️ CLI tool to easily manage IPTables forwards

Manage iptable rules for the private interface on DigitalOcean droplets

• digitalocean
• iptables

Intrusion Prevention System (IPS) for Secure Shell (SSH)

RPC Checkpoint for EOS nodes

A GraphQL executable document fingerprint hasher and API proxy to compare queries without formatting diffs, comments, variables and input values.

• graphql
• hasher
• proxy-server
• go

GitHub Action to build Docker images with outbound network access restricted to an allowlist

A simple script that processes the generated Suricata eve-log in real time.

Free WordPress AI traffic analytics and bot protection. See local crawler counts and identity evidence; protect forms, logins and WooCommerce checkout.

• anti-spam
• bot-detection
• php
• security