SafeLine is a self-hosted WAF(Web Application Firewall) / reverse proxy to protect your web apps from attacks and exploits.
Repository Index
55,140 visible repositories in the index
1–21 of 21 · Most stars
Daemon to ban hosts that cause multiple authentication errors
Open-source IDS/IPS, WAF and bot detection for Linux, Windows, Docker and Kubernetes, with a crowdsourced blocklist of malicious IPs.
OpenSnitch is a GNU/Linux interactive application firewall inspired by Little Snitch.
- application-firewall
- firewall
- linux
- networking
🏔 Love Freedom - ❌ Block Mass Surveillance
Make your infrastructure invisible to attackers. OpenNHP implements the Network-infrastructure Hiding Protocol (NHP): authenticate before connection, cryptographically. IETF draft.
- cybersecurity
- zero-trust
- zero-trust-network-access
- zero-trust-security
LuLu is the free open-source macOS firewall
ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx. It has a robust event-based programming language which provides protection from a range of attacks against web applications and allows for HTTP traffic monitoring, logging and real-time analysis.
- modsecurity
- nginx
- apache
- apache2
Simple tool to configure Windows Filtering Platform (WFP) which can configure network activity on your computer.
Cloud native networking and network security
Industry-leading free, high-performance, AI and semantic technology Web Application Firewall and API Security Gateway (WAAP) - UUSEC WAF.
- waf
- application-security
- web-application-firewall
- modsecurity
The first open-source DDoS protection system
- dpdk
- ddos
- ddos-mitigation
- ddos-protection
Database security suite. Database proxy with field-level encryption, search through encrypted data, SQL injections prevention, intrusion detection, honeypots. Supports client-side and proxy-side ("transparent") encryption. SQL, NoSQL.
- encryption-server
- encryption
- crypto
- cryptography
Real-time network monitor + outbound firewall — see & block every connection. Privacy-first, local-first, Rust fleet agent, SIEM exports, 8 languages. / Moniteur réseau temps réel + pare-feu sortant, agent de flotte Rust, exports SIEM. 100 % local.
teler-waf is a Go HTTP middleware that protects local web services from OWASP Top 10 threats, known vulnerabilities, malicious actors, botnets, unwanted crawlers, and brute force attacks.
- ids
- teler
- waf
- teler-ids
Defensive mitigation and testing toolkit for PHP security vulnerabilities (CVE-2026-109618, CVE-2026-109619, CVE-2026-115560), including Apache protections and PHP hardening guidance
- cybersecurity
- defenses
- patches
- php
CetusGuard is a tool that protects the Docker daemon socket by filtering calls to its API endpoints.
This library protects against typical web attacks. It was inspired in rack-protection Ruby gem.
⛓️ CLI tool to easily manage IPTables forwards
GitHub Action to build Docker images with outbound network access restricted to an allowlist
Free WordPress AI traffic analytics and bot protection. See local crawler counts and identity evidence; protect forms, logins and WooCommerce checkout.
- anti-spam
- bot-detection
- php
- security