Cloud web application firewall that protects web applications and APIs from common exploits and bots via customizable rule sets, managed rule groups, IP reputation lists, and rate-based controls; integrates with CloudFront, ALB, and API Gateway.
SafeLine is a self-hosted Web Application Firewall (WAF) and reverse proxy that defends web apps from SQL injection, XSS, bot abuse, and DDoS using ML-powered threat detection and configurable policies.
22.4k stars1.5k forksGPL-3.0last commit Actively maintained
Anubis is a lightweight web AI firewall that protects sites from AI crawlers and scraping bots using configurable request challenges and bot policies.
21.7k stars693 forksMITlast commit Actively maintained
BunkerWeb is an open-source WAF and NGINX-based reverse proxy to protect web apps and APIs with HTTPS automation, security policies, and extensible plugins.
10.9k stars640 forksAGPL-3.0last commit Actively maintained
HAProxy is a fast, reliable reverse proxy and load balancer for TCP and HTTP applications, providing high availability, TLS termination, health checks, and traffic routing.
6.8k stars964 forkslast commit Actively maintained
Lura is a stateless, high-performance API gateway framework for building reverse proxies that aggregate, transform, and secure backend APIs via middleware and plugins.
6.8k stars582 forkslast commit Actively maintained
High-performance web application firewall and API security gateway with semantic detection, rule management, and reverse-proxy deployment for protecting websites and APIs.
1.7k stars170 forksBSD-2-Clauselast commit Actively maintained
NetGoat is a self-hostable reverse proxy and traffic management platform offering Cloudflare-like features such as TLS termination, rate limiting, WAF-style filtering, and dashboards.
890 stars47 forksAGPL-3.0last commit Actively maintained
Every option on this page is open source and free to run on your own hardware, so you own the data and there is no subscription to cancel. 7 of 7 shipped a commit in the last six months. Licences in this list: GPL-3.0, MIT, AGPL-3.0, BSD-2-Clause. In exchange you take on hosting, backups and updates yourself.
Browse everything in Edge & Traffic (Reverse Proxy, Load Balancing, Web Servers).
