All tags
Catalogue tag

#waf

Every repository in the public record carrying this tag — from its GitHub topics or the keywords its package registries publish. Health is measured under the same versioned methodology as the rest of the record.

42 records
Tagged “waf”Ranked by health index
PyPI
94Exceptionalhealth index
Guard-Core/fastapi-guard
A security library for FastAPI that provides middleware to control IPs, log requests, detect penetration attempts, honeypot setup, behavioural analysis, emergency mode lockdown, block Cloud Provider IPs, country blocking, and much more... It integrates seamlessly with FastAPI to offer robust protection against various security threats.
Python★ 824↓ 62.2K/moOct 10, 2026
MITOct 10, 2026 · metrics 2.10.0
npm
94Exceptionalhealth index
arcjet/arcjet-js
Runtime security for AI apps and agents: prompt injection detection, tool-call authorization, sensitive-data redaction, bot protection, and rate limiting. Drop it into your JS/TS code.
TypeScript★ 682↓ 2.2M/moSep 11, 2026
Apache-2.0Sep 11, 2026 · metrics 2.10.0
npm · PyPI
94Exceptionalhealth index
bunkerity/bunkerweb
🛡️ Open-source and cloud-native Web Application Firewall (WAF)
Python · HTML · JavaScript★ 10.9KAug 28, 2026
AGPL-3.0Aug 28, 2026 · metrics 2.10.0
Go
93Exceptionalhealth index
coreruleset/go-ftw
Web Application Firewall Testing Framework - Go version
Go★ 181Sep 15, 2026
Apache-2.0Sep 15, 2026 · metrics 2.10.0
—
90Excellenthealth index
owasp-modsecurity/ModSecurity
ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx. It has a robust event-based programming language which provides protection from a range of attacks against web applications and allows for HTTP traffic monitoring, logging and real-time analysis.
C++★ 9,752Aug 28, 2026
Apache-2.0Aug 28, 2026 · metrics 2.10.0
Go · npm
88Excellenthealth index
fabriziosalmi/caddy-waf
Caddy WAF (Regex Rules, IP and DNS filtering, Rate Limiting, GeoIP, Tor, Anomaly Detection)
Go · Python★ 861Sep 19, 2026
AGPL-3.0Sep 19, 2026 · metrics 2.10.0
Go · npm · PyPI
88Excellenthealth index
fabriziosalmi/secure-proxy-manager
Secure proxy solution with filtering, real-time monitoring and a modern web UI.
Go · TypeScript · Shell★ 46Oct 1, 2026
MITOct 1, 2026 · metrics 2.10.0
Go · npm
87Excellenthealth index
fuomag9/caddy-proxy-manager
The modern web interface for Caddy Server. WAF protection, automatic HTTPS, mTLS, forward auth, geo blocking, L4 TCP/UDP proxying, traffic analytics, a full REST API, and a complete audit trail. All in one place.
TypeScript★ 203Sep 8, 2026
MITSep 8, 2026 · metrics 2.10.0
Go
86Excellenthealth index
chaitin/SafeLine
SafeLine is a self-hosted WAF(Web Application Firewall) / reverse proxy to protect your web apps from attacks and exploits.
Go · C++ · Raku★ 22.6KSep 19, 2026
GPL-3.0Sep 19, 2026 · metrics 2.10.0
—
86Excellenthealth index
duggytuxy/syswarden
Linux defense. Your host. Your rules. Host-local Linux defense with auditable, fail-closed enforcement.
Go · Python★ 395Oct 21, 2026
GPL-3.0Oct 21, 2026 · metrics 2.10.0
Go
83Excellenthealth index
uwaserver/uwas
Unified Web Application Server — Apache+Nginx+Varnish+Caddy in a single Go binary. Auto HTTPS, built-in caching, PHP/FastCGI, reverse proxy, load balancing, WAF, web dashboard, and MCP server.
Go · TypeScript★ 130Sep 10, 2026
Custom licenseSep 10, 2026 · metrics 2.10.0
Go · npm
81Excellenthealth index
Wikid82/Charon
Self-hosted, open-source reverse proxy manager — a friendly web-UI alternative to Nginx Proxy Manager and Traefik, built on Caddy. Automatic HTTPS, WAF, CrowdSec IDS, Docker discovery. One container, zero config files.
Go · TypeScript★ 9Sep 10, 2026
MITSep 10, 2026 · metrics 2.10.0
crates.io
81Excellenthealth index
gen0sec/synapse
Active NDR solution with eBPF-powered active fingerprint blocking, firewall and proxy. Protect your system -- east-west and north-south.
Rust★ 166Aug 4, 2026
Custom licenseAug 4, 2026 · metrics 2.10.0
npm
80Excellenthealth index
patchstack/connect
Patchstack connector for JavaScript applications. Scans your lockfile and reports installed packages to Patchstack for vulnerability monitoring.
TypeScript · JavaScript★ 1↓ 2,225/moSep 12, 2026
MITSep 12, 2026 · metrics 2.10.0
crates.io
78Goodhealth index
DataDog/libddwaf
Datadog's WAF & RASP Engine
C++★ 43↓ 3/moSep 14, 2026
Custom licenseSep 14, 2026 · metrics 2.10.0
Go
77Goodhealth index
barbacana-waf/barbacana
A WAF secure by default and simple by design.
Go · Hurl★ 9Sep 12, 2026
Apache-2.0Sep 12, 2026 · metrics 2.10.0
crates.io · npm
77Goodhealth index
soapbucket/sbproxy
Open source Enterprise AI Gateway for API, MCP and agent, and AI model traffic. One Apache-2.0 binary: 72 native providers behind an OpenAI-compatible API, or serve vLLM and llama.cpp on your own GPUs. Keys, budgets, guardrails, semantic cache, WAF.
Rust★ 53Sep 14, 2026
Apache-2.0Sep 14, 2026 · metrics 2.10.0
Go
75Goodhealth index
DataDog/go-libddwaf
Go bindings for DataDog/libddwaf
Go★ 16Oct 16, 2026
Apache-2.0Oct 16, 2026 · metrics 2.10.0
PyPI
75Goodhealth index
icvoss/django-waf
Self-hosted WAF middleware for Django: rate limiting, anomaly scoring, proof-of-work challenges, form protection, and nginx blocklists
Python★ 3↓ 1,653/moSep 11, 2026
MITSep 11, 2026 · metrics 2.10.0
Go
73Goodhealth index
davidmontoyago/pulumi-cloudflare-free-edge-protection
Internet-grade protection under the Cloudlflare free tier. DDoS, rate limits, TLS, caching and WAF protection for public endpoints in any cloud with Cloudflare's edge infrastructure.
Go★ 0Oct 21, 2026
Apache-2.0Oct 21, 2026 · metrics 2.10.0
Go
71Goodhealth index
koltyakov/expose
🚀 Self-hosted HTTP tunnel for exposing local apps and static sites with automatic HTTPS, built-in WAF, and a real-time terminal dashboard
Go★ 8Sep 11, 2026
MITSep 11, 2026 · metrics 2.10.0
PyPI
69Goodhealth index
Averyy/wafer
Anti-detection HTTP client for Python that handles TLS fingerprinting, WAF challenge solving, and cookie management.
Python★ 7↓ 149.9K/moSep 14, 2026
Apache-2.0Sep 14, 2026 · metrics 2.10.0
Go
69Goodhealth index
kdwils/envoy-proxy-crowdsec-bouncer
A lightweight Crowdsec remediation component for envoy proxy and envoy gateway
Go★ 49Oct 15, 2026
MITOct 15, 2026 · metrics 2.10.0
Go
65Goodhealth index
defensia/agent
Lightweight security agent for Linux servers — SSH brute force, WAF, bot detection, Docker/Kubernetes native. Deploy via curl, Docker, Helm.
Go★ 5Sep 20, 2026
MITSep 20, 2026 · metrics 2.10.0
Packagist
62Moderatehealth index
flowd/phirewall-preset-owasp-crs
No repository description published.
PHP★ 0↓ 2,378/moOct 5, 2026
Custom licenseOct 5, 2026 · metrics 2.10.0
Go
60Moderatehealth index
1rhino2/RhinoWAF
Go WAF for VPS + Traefik/nginx. Self-host free; paid go-live setup (Discord: 1rhino2)
Go★ 55Oct 21, 2026
Custom licenseOct 21, 2026 · metrics 2.10.0
crates.io
59Moderatehealth index
santhreal/wafrift
WAF evasion testing toolkit. Grammar + encoding mutation, dialect-specific bypasses, evolutionary search, per-WAF gene-bank persistence. Rust.
Rust★ 24Oct 4, 2026
Apache-2.0Oct 4, 2026 · metrics 2.10.0