SafeLine is a self-hosted WAF(Web Application Firewall) / reverse proxy to protect your web apps from attacks and exploits.

• UpdatedNov 5, 2025
• Go

🛡️ Open-source and next-generation Web Application Firewall (WAF)

• UpdatedDec 18, 2025
• Python

Everything about Web Application Firewalls (WAFs) from Security Standpoint! 🔥

• UpdatedAug 28, 2025
• Python

WAFW00F allows one to identify and fingerprint Web Application Firewall (WAF) products protecting a website.

• UpdatedSep 13, 2025
• Python

OWASP Coraza WAF is a golang modsecurity compatible web application firewall library

• UpdatedDec 18, 2025
• Go

Detect and bypass web application firewalls and protection systems

• UpdatedAug 11, 2024
• Python

An open-source project in Golang to asess different API Security tools and WAF for detection logic and bypasses

• UpdatedJul 31, 2025
• Go

Handy, High performance, ModSecurity compatible Nginx firewall module & 方便、高性能、兼容 ModSecurity 的 Nginx 防火墙模块

• UpdatedJan 25, 2025
• C

Industry-leading free, high-performance, AI and semantic technology Web Application Firewall and API Security Gateway (WAAP) - UUSEC WAF.

• UpdatedDec 15, 2025
• Lua

open-appsec is a machine learning security engine that preemptively and automatically prevents threats against Web Application & APIs. This repo include the main code and logic.

• UpdatedNov 26, 2025
• C++

JANUSEC Application Gateway provides secure access, including reverse proxy, K8S Ingress Controller, Automatic ACME Certificate, WAF, 5-Second Shield, CC Defense, OAuth2 Authentication, Global Server Load Balance, and Cookie Compliance etc. JANUSEC应用网关，提供安全的接入，包括反向代理、K8S Ingress Controller、自动化ACME证书、WAF、5秒盾、CC防御、OAuth2身份认证、GSLB负载均衡与Cookie合规等。

• UpdatedAug 23, 2025
• Go

BlazeHTTP 是一款简单易用的 WAF 防护效果测试工具。BlazeHTTP stands as a user-friendly WAF protection efficacy evaluation tool.

• UpdatedJul 1, 2024
• Go

Web security protection system based on openresty

• UpdatedMar 30, 2021
• C

A powerful PHP WAF for AWD

• UpdatedJul 7, 2024
• PHP

Caddy WAF (Regex Rules, IP and DNS filtering, Rate Limiting, GeoIP, Tor, Anomaly Detection)

• UpdatedDec 11, 2025
• Go

Web application acceleration, advanced DDoS protection and web security

• UpdatedDec 17, 2025
• C

Fast and light-weight API proxy firewall for request and response validation by OpenAPI specs.

• UpdatedDec 5, 2025
• Go

堡塔云WAF，宝塔免费(free)的私有云网站应用防火墙(firewall)，基于docker/nginx/lua开发

• UpdatedDec 9, 2025
• Go

HTTP & OAuth Gateway and Web Application Firewall (WAF) based on ModSecurity, online demo:https://door.caswaf.com

• UpdatedDec 14, 2025
• Go

A tool to perform DNS reconnaissance on target networks. Among the DNS information got from include subdomains, mx records, web application firewall detection and more fingerprinting and lookups

• UpdatedSep 15, 2024
• Python