Cloudflare Web Application Firewall (WAF) is a cloud-based security service that protects websites and APIs from common web attacks (OWASP Top 10), bots, credential stuffing and zero-days using managed and custom rules, rate limiting, ML detection and threat intelligence at the CDN edge.
SafeLine is a self-hosted Web Application Firewall (WAF) and reverse proxy that defends web apps from SQL injection, XSS, bot abuse, and DDoS using ML-powered threat detection and configurable policies.
22.4k stars1.5k forksGPL-3.0last commit Actively maintained
Anubis is a lightweight web AI firewall that protects sites from AI crawlers and scraping bots using configurable request challenges and bot policies.
21.7k stars693 forksMITlast commit Actively maintained
CrowdSec is an open-source security engine that detects attacks from logs and blocks malicious IPs using bouncers and community-curated threat intelligence.
14.7k stars710 forksMITlast commit Actively maintained
BunkerWeb is an open-source WAF and NGINX-based reverse proxy to protect web apps and APIs with HTTPS automation, security policies, and extensible plugins.
10.9k stars640 forksAGPL-3.0last commit Actively maintained
HAProxy is a fast, reliable reverse proxy and load balancer for TCP and HTTP applications, providing high availability, TLS termination, health checks, and traffic routing.
6.8k stars964 forkslast commit Actively maintained
Lura is a stateless, high-performance API gateway framework for building reverse proxies that aggregate, transform, and secure backend APIs via middleware and plugins.
6.8k stars582 forkslast commit Actively maintained
A general-purpose HTTP reverse proxy and forwarding tool for homelabs, offering web UI, ACME/TLS, stream proxy, plugins and realtime monitoring.
5.4k stars320 forksAGPL-3.0last commit Actively maintained
High-performance web application firewall and API security gateway with semantic detection, rule management, and reverse-proxy deployment for protecting websites and APIs.
1.7k stars170 forksBSD-2-Clauselast commit Actively maintained
NetGoat is a self-hostable reverse proxy and traffic management platform offering Cloudflare-like features such as TLS termination, rate limiting, WAF-style filtering, and dashboards.
890 stars47 forksAGPL-3.0last commit Actively maintained
Every option on this page is open source and free to run on your own hardware, so you own the data and there is no subscription to cancel. 9 of 9 shipped a commit in the last six months. Licences in this list: GPL-3.0, MIT, AGPL-3.0, BSD-2-Clause. In exchange you take on hosting, backups and updates yourself.
Browse everything in Edge & Traffic (Reverse Proxy, Load Balancing, Web Servers).
