Repository Index

Weighs the soul of incoming HTTP requests to stop AI crawlers

• defense
• security

SafeLine is a self-hosted WAF(Web Application Firewall) / reverse proxy to protect your web apps from attacks and exploits.

• firewall
• http-flood
• security
• sql-injection

Daemon to ban hosts that cause multiple authentication errors

• linux
• macos
• security
• intrusion-prevention

🏔 Love Freedom - ❌ Block Mass Surveillance

• application-firewall
• dns
• firewall
• go

Make your infrastructure invisible to attackers. OpenNHP implements the Network-infrastructure Hiding Protocol (NHP): authenticate before connection, cryptographically. IETF draft.

• cybersecurity
• zero-trust
• zero-trust-network-access
• zero-trust-security

No-root network monitor, firewall and PCAP dumper for Android

• pcap
• capture-traffic
• android
• no-root

OWASP Coraza WAF is a golang modsecurity compatible web application firewall library

• coraza
• waf
• coraza-waf
• owasp-crs

open-appsec is a machine learning security engine that preemptively and automatically prevents threats against Web Application & APIs. This repo include the main code and logic.

• api-security
• application-security
• kubernetes
• nginx

Database security suite. Database proxy with field-level encryption, search through encrypted data, SQL injections prevention, intrusion detection, honeypots. Supports client-side and proxy-side ("transparent") encryption. SQL, NoSQL.

• encryption-server
• encryption
• crypto
• cryptography

Real-time network monitor + outbound firewall — see & block every connection. Privacy-first, local-first, Rust fleet agent, SIEM exports, 8 languages. / Moniteur réseau temps réel + pare-feu sortant, agent de flotte Rust, exports SIEM. 100 % local.

• cybersecurity
• d3js
• electron
• fastapi

Firewall and Privatizing Proxy for Trackers, Attackers, Malware, Adware, and Spammers with Anti-Virus On-Demand and On-Access Scanning (PF, squid, privoxy, hphosts, dshield, emergingthreats, hostsfile, PAC file, clamav)

• proxy
• tracker
• firewall
• privacy-enhancing-technologies

teler-waf is a Go HTTP middleware that protects local web services from OWASP Top 10 threats, known vulnerabilities, malicious actors, botnets, unwanted crawlers, and brute force attacks.

• ids
• teler
• waf
• teler-ids

A rest application to update firewalld rules on a linux server

• firewalld
• firewalld-configuration
• golang
• rest-api

Defensive mitigation and testing toolkit for PHP security vulnerabilities (CVE-2026-109618, CVE-2026-109619, CVE-2026-115560), including Apache protections and PHP hardening guidance

• cybersecurity
• defenses
• patches
• php

CetusGuard is a tool that protects the Docker daemon socket by filtering calls to its API endpoints.

• docker
• security
• container
• daemon

⛓️ CLI tool to easily manage IPTables forwards

A GraphQL executable document fingerprint hasher and API proxy to compare queries without formatting diffs, comments, variables and input values.

• graphql
• hasher
• proxy-server
• go

GitHub Action to build Docker images with outbound network access restricted to an allowlist