Repository Index

Weighs the soul of incoming HTTP requests to stop AI crawlers

• defense
• security

OpenSnitch is a GNU/Linux interactive application firewall inspired by Little Snitch.

• application-firewall
• firewall
• linux
• networking

🏔 Love Freedom - ❌ Block Mass Surveillance

• application-firewall
• dns
• firewall
• go

🛡️ Open-source and cloud-native Web Application Firewall (WAF)

• nginx
• modsecurity
• docker
• security

ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx. It has a robust event-based programming language which provides protection from a range of attacks against web applications and allows for HTTP traffic monitoring, logging and real-time analysis.

• modsecurity
• nginx
• apache
• apache2

Cloud native networking and network security

• cni
• cni-plugin
• ebpf
• k8s

TranslatedAutomatically block unwanted, leeches and abnormal BT peers with support for customized and cloud rules. Supports qB/qBEE/Deluge/BiglyBT/BitComet

• bittorrent
• qbittorrent
• xunlei
• transmission

DNS over HTTPS / DNS over Tor / DNSCrypt client, WireGuard proxifier, firewall, and connection tracker for Android.

• android-app
• firewall
• android-firewall
• dns-over-https

Main repository for pfSense

• pfsense
• firewall
• freebsd

Nginx Block Bad Bots, Spam Referrer Blocker, Vulnerability Scanners, User-Agents, Malware, Adware, Ransomware, Malicious Sites, with anti-DDOS, Wordpress Theme Detector Blocking and Fail2Ban Jail for Repeat Offenders

• nginx
• nginx-server
• bot-blocker
• bots

OPNsense GUI, API and systems backend

• firewall
• gui
• api
• ips

open-appsec is a machine learning security engine that preemptively and automatically prevents threats against Web Application & APIs. This repo include the main code and logic.

• api-security
• application-security
• kubernetes
• nginx

Database security suite. Database proxy with field-level encryption, search through encrypted data, SQL injections prevention, intrusion detection, honeypots. Supports client-side and proxy-side ("transparent") encryption. SQL, NoSQL.

• encryption-server
• encryption
• crypto
• cryptography

Translatedapfree-wifidog is a high-performance captive portal solution that serves as a gateway between your wireless networks and the Internet. Optimized for both HTTP and HTTPS traffic, it ensures secure border control while enabling seamless user authentication and efficient network management. Buy the services in the link below to support my open source work.

• openwrt
• libevent
• c
• wifidog

Open-source, auditable network gateway for homelabs, NAS and servers: DDNS, STUN traversal, port forwarding with SNI routing, reverse proxy and web server, ACME certificates, WAF, Tailscale, frp, Cloudflare Tunnel, Docker and web terminal in one binary. Runs on Docker, fnOS, OpenWrt, Linux, macOS and Windows.

• acme
• ddns
• frp
• golang

Defensive mitigation and testing toolkit for PHP security vulnerabilities (CVE-2026-109618, CVE-2026-109619, CVE-2026-115560), including Apache protections and PHP hardening guidance

• cybersecurity
• defenses
• patches
• php

An EBPF based IPv4/IPv6 firewall with integrations for OpenZiti Zero-Trust Framework edge-routers and tunnellers

• ebpf
• ebpf-tc
• firewall
• ipv4

This library protects against typical web attacks. It was inspired in rack-protection Ruby gem.

• middlewares
• security
• http
• crystal

Free WordPress AI traffic analytics and bot protection. See local crawler counts and identity evidence; protect forms, logins and WooCommerce checkout.

• anti-spam
• bot-detection
• php
• security