Bot and online fraud protection platform that detects, classifies and blocks malicious automated traffic (scraping, credential stuffing, account takeover) across websites, mobile apps and APIs using real‑time monitoring and ML-based decisions.
SafeLine is a self-hosted Web Application Firewall (WAF) and reverse proxy that defends web apps from SQL injection, XSS, bot abuse, and DDoS using ML-powered threat detection and configurable policies.
22.4k stars1.5k forksGPL-3.0last commit Actively maintained
Anubis is a lightweight web AI firewall that protects sites from AI crawlers and scraping bots using configurable request challenges and bot policies.
21.7k stars693 forksMITlast commit Actively maintained
Lightweight, self-hostable CAPTCHA alternative using SHA-256 proof-of-work challenges to protect forms and APIs from bots without tracking or visual puzzles.
7.6k stars551 forkslast commit Actively maintained
High-performance web application firewall and API security gateway with semantic detection, rule management, and reverse-proxy deployment for protecting websites and APIs.
1.7k stars170 forksBSD-2-Clauselast commit Actively maintained
Every option on this page is open source and free to run on your own hardware, so you own the data and there is no subscription to cancel. 4 of 4 shipped a commit in the last six months. Licences in this list: GPL-3.0, MIT, BSD-2-Clause. In exchange you take on hosting, backups and updates yourself.
Browse everything in Network Security (VPN, Firewall, WAF).
