SafeLine is a self-hosted WAF(Web Application Firewall) / reverse proxy to protect your web apps from attacks and exploits.
Repository Index
47,133 repositories indexed
1–14 of 14 · Most stars
Daemon to ban hosts that cause multiple authentication errors
Open-source IDS/IPS, WAF and bot detection for Linux, Windows, Docker and Kubernetes, with a crowdsourced blocklist of malicious IPs.
OpenSnitch is a GNU/Linux interactive application firewall inspired by Little Snitch.
- application-firewall
- firewall
- linux
- networking
🏔 Love Freedom - ❌ Block Mass Surveillance
Make your infrastructure invisible to attackers. OpenNHP implements the Network-infrastructure Hiding Protocol (NHP): authenticate before connection, cryptographically. IETF draft.
- cybersecurity
- zero-trust
- zero-trust-network-access
- zero-trust-security
LuLu is the free open-source macOS firewall
Industry-leading free, high-performance, AI and semantic technology Web Application Firewall and API Security Gateway (WAAP) - UUSEC WAF.
- waf
- application-security
- web-application-firewall
- modsecurity
The first open-source DDoS protection system
- dpdk
- ddos
- ddos-mitigation
- ddos-protection
Database security suite. Database proxy with field-level encryption, search through encrypted data, SQL injections prevention, intrusion detection, honeypots. Supports client-side and proxy-side ("transparent") encryption. SQL, NoSQL.
- encryption-server
- encryption
- crypto
- cryptography
Real-time network monitor + outbound firewall — see & block every connection. Privacy-first, local-first, Rust fleet agent, SIEM exports, 8 languages. / Moniteur réseau temps réel + pare-feu sortant, agent de flotte Rust, exports SIEM. 100 % local.
Defensive mitigation and testing toolkit for PHP security vulnerabilities (CVE-2026-109618, CVE-2026-109619, CVE-2026-115560), including Apache protections and PHP hardening guidance
- cybersecurity
- defenses
- patches
- php
This library protects against typical web attacks. It was inspired in rack-protection Ruby gem.
GitHub Action to build Docker images with outbound network access restricted to an allowlist