Repository Index

Weighs the soul of incoming HTTP requests to stop AI crawlers

• defense
• security

🛡️ Open-source and cloud-native Web Application Firewall (WAF)

• nginx
• modsecurity
• docker
• security

A very powerful and friendly nginx base on lua-nginx-module( openresty ) which provide WAF, Control Panel, and Dashboards.

Rack middleware for blocking & throttling

• rack-attack
• ruby
• rack-middleware
• rack

No-root network monitor, firewall and PCAP dumper for Android

• pcap
• capture-traffic
• android
• no-root

OWASP Coraza WAF is a golang modsecurity compatible web application firewall library

• coraza
• waf
• coraza-waf
• owasp-crs

open-appsec is a machine learning security engine that preemptively and automatically prevents threats against Web Application & APIs. This repo include the main code and logic.

• api-security
• application-security
• kubernetes
• nginx

Database security suite. Database proxy with field-level encryption, search through encrypted data, SQL injections prevention, intrusion detection, honeypots. Supports client-side and proxy-side ("transparent") encryption. SQL, NoSQL.

• encryption-server
• encryption
• crypto
• cryptography

Real-time network monitor + outbound firewall — see & block every connection. Privacy-first, local-first, Rust fleet agent, SIEM exports, 8 languages. / Moniteur réseau temps réel + pare-feu sortant, agent de flotte Rust, exports SIEM. 100 % local.

• cybersecurity
• d3js
• electron
• fastapi

Open-source, auditable network gateway for homelabs, NAS and servers: DDNS, STUN traversal, port forwarding with SNI routing, reverse proxy and web server, ACME certificates, WAF, Tailscale, frp, Cloudflare Tunnel, Docker and web terminal in one binary. Runs on Docker, fnOS, OpenWrt, Linux, macOS and Windows.

• acme
• ddns
• frp
• golang

Firewall and Privatizing Proxy for Trackers, Attackers, Malware, Adware, and Spammers with Anti-Virus On-Demand and On-Access Scanning (PF, squid, privoxy, hphosts, dshield, emergingthreats, hostsfile, PAC file, clamav)

• proxy
• tracker
• firewall
• privacy-enhancing-technologies

teler-waf is a Go HTTP middleware that protects local web services from OWASP Top 10 threats, known vulnerabilities, malicious actors, botnets, unwanted crawlers, and brute force attacks.

• ids
• teler
• waf
• teler-ids

Defensive mitigation and testing toolkit for PHP security vulnerabilities (CVE-2026-109618, CVE-2026-109619, CVE-2026-115560), including Apache protections and PHP hardening guidance

• cybersecurity
• defenses
• patches
• php

CetusGuard is a tool that protects the Docker daemon socket by filtering calls to its API endpoints.

• docker
• security
• container
• daemon

This library protects against typical web attacks. It was inspired in rack-protection Ruby gem.

• middlewares
• security
• http
• crystal

⛓️ CLI tool to easily manage IPTables forwards

Intrusion Prevention System (IPS) for Secure Shell (SSH)

A GraphQL executable document fingerprint hasher and API proxy to compare queries without formatting diffs, comments, variables and input values.

• graphql
• hasher
• proxy-server
• go