npm · PyPI
bunkerity/bunkerweb
🛡️ Open-source and cloud-native Web Application Firewall (WAF)
AGPL-3.0Aug 28, 2026 · metrics 2.10.0
All tags
Catalogue tag
#waf
Every repository in the public record carrying this tag — from its GitHub topics or the keywords its package registries publish. Health is measured under the same versioned methodology as the rest of the record.
25 records
npm
arcjet/arcjet-js
Arcjet JavaScript (JS) / TypeScript SDK. Stop bots and automated attacks from burning your AI budget, leaking data, or misusing tools with Arcjet's AI security building blocks.
Apache-2.0Jul 19, 2026 · metrics 2.10.0
Go
coreruleset/go-ftw
Web Application Firewall Testing Framework - Go version
Apache-2.0Jul 31, 2026 · metrics 2.10.0
—
owasp-modsecurity/ModSecurity
ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx. It has a robust event-based programming language which provides protection from a range of attacks against web applications and allows for HTTP traffic monitoring, logging and real-time analysis.
Apache-2.0Aug 28, 2026 · metrics 2.10.0
—
duggytuxy/syswarden
SysWarden is a host-local security orchestrator combining authoritative nftables policy, HIDS/HIPS telemetry, bounded threat intelligence, out-of-band WAAP log analysis, authenticated high availability and a native terminal dashboard.
GPL-3.0Sep 5, 2026 · metrics 2.10.0
crates.io
gen0sec/synapse
Active NDR solution with eBPF-powered active fingerprint blocking, firewall and proxy. Protect your system -- east-west and north-south.
Custom licenseAug 4, 2026 · metrics 2.10.0
Go · npm
wikid82/charon
A lightweight, user-friendly web interface for managing Caddy as a reverse proxy. It simplifies SSL management and host routing for self-hosters who want the power of Caddy without the manual configuration.
MITJul 15, 2026 · metrics 2.10.0
Go
barbacana-waf/barbacana
A WAF secure by default and simple by design.
Apache-2.0Jul 21, 2026 · metrics 2.10.0
Go
uwaserver/uwas
Unified Web Application Server — Apache+Nginx+Varnish+Caddy in a single Go binary. Auto HTTPS, built-in caching, PHP/FastCGI, reverse proxy, load balancing, WAF, web dashboard, and MCP server.
Custom licenseJul 17, 2026 · metrics 2.10.0
Go · npm
wikid82/caddyproxymanagerplus
A lightweight, user-friendly web interface for managing Caddy as a reverse proxy. It simplifies SSL management and host routing for self-hosters who want the power of Caddy without the manual configuration.
MITJul 17, 2026 · metrics 2.10.0
crates.io · npm
soapbucket/sbproxy
Self-hosted AI gateway and LLM proxy. OpenAI-compatible API for OpenAI, Anthropic, Gemini, Bedrock and 60+ providers, or serve vLLM/llama.cpp on your GPUs. Keys, budgets, guardrails, semantic cache, MCP
Apache-2.0Jul 30, 2026 · metrics 2.10.0
Go
davidmontoyago/pulumi-cloudflare-free-edge-protection
Internet-grade protection under the Cloudlflare free tier. DDoS, rate limits, TLS, caching and WAF protection for public endpoints in any cloud with Cloudflare's edge infrastructure.
Apache-2.0Sep 5, 2026 · metrics 2.10.0
Go
koltyakov/expose
🚀 Self-hosted HTTP tunnel for exposing local apps and static sites with automatic HTTPS, built-in WAF, and a real-time terminal dashboard
MITJul 18, 2026 · metrics 2.10.0
Go
1rhino2/RhinoWAF
Go WAF for VPS + Traefik/nginx. Self-host free; paid go-live setup (Discord: 1rhino2)
Custom licenseAug 30, 2026 · metrics 2.10.0
PyPI
icvoss/django-waf
Self-hosted WAF middleware for Django: rate limiting, anomaly scoring, proof-of-work challenges, form protection, and nginx blocklists
MITJul 19, 2026 · metrics 2.10.0
PyPI
Averyy/wafer
Anti-detection HTTP client for Python that handles TLS fingerprinting, WAF challenge solving, and cookie management.
Apache-2.0Jul 29, 2026 · metrics 2.10.0
crates.io
santhreal/openpack
Safe archive-reader for ZIP-derived formats (ZIP, CRX, JAR, APK, IPA) with BOM-safe checks.
MITJul 18, 2026 · metrics 2.10.0
crates.io
santhsecurity/openpack
Safe archive-reader for ZIP-derived formats (ZIP, CRX, JAR, APK, IPA) with BOM-safe checks.
MITJul 17, 2026 · metrics 2.10.0
Go
Janusec/janusec
JANUSEC Application Gateway provides secure access, including reverse proxy, K8S Ingress Controller, Automatic ACME Certificate, WAF, 5-Second Shield, CC Defense, OAuth2 Authentication, Global Server Load Balance, and Cookie Compliance etc. JANUSEC应用网关，提供安全的接入，包括反向代理、K8S Ingress Controller、自动化ACME证书、WAF、5秒盾、CC防御、OAuth2身份认证、GSLB负载均衡与Cookie合规等。
Custom licenseJul 26, 2026 · metrics 2.10.0
RubyGems
padrino/padrino-framework
Padrino is a full-stack ruby framework built upon Sinatra.
MITJul 22, 2026 · metrics 2.10.0
PyPI
VeNoMouS/cloudscraper
A Python module to bypass Cloudflare's anti-bot page.
MITAug 28, 2026 · metrics 2.10.0
npm
TooTallNate/node-bindings
Helper module for loading your native module's `.node` file
MITAug 31, 2026 · metrics 2.10.0
npm · RubyGems
aws/aws-sdk-js
AWS SDK for JavaScript v2 (End-of-Life as of 09/08/2025). The AWS SDK for JavaScript v3 in the browser and Node.js is available here: https://github.com/aws/aws-sdk-js-v3
Apache-2.0Aug 12, 2026 · metrics 2.10.0
Go
andreyfesunov/awswaf
AWS WAF Captcha Solver implemented in Golang
MITAug 16, 2026 · metrics 2.10.0
Go
cnaize/cure
Cure — Pure Go API Shield based on YARA rules
MITAug 29, 2026 · metrics 2.10.0