
SafeLine
Self-hosted WAF and reverse proxy for securing web apps

SafeLine is a self-hosted Web Application Firewall (WAF) that sits in front of web apps to filter and monitor HTTP/S traffic, protecting against common web attacks. It also functions as a reverse proxy with ML-powered threat detection and modular, policy-driven protection.
Key Features
- Intelligent protection engine powered by machine learning with high detection rates and very low false positives
- Bot protection with CAPTCHA challenges and anti-replay protection
- HTTP Flood DDoS protection through intelligent traffic orchestration and rate limiting
- Identity and Access Management for on-prem and cloud apps via standard protocols and flexible integration
- Nginx-based reverse proxy architecture that shields web apps from the Internet
Use Cases
- E-commerce & Payment Platforms: protects merchant sites with real-time bot detection and traffic analysis, aiming to maintain availability during peak periods
- SaaS & Cloud Platforms: protects REST and GraphQL APIs from common web threats with ML-powered anomaly detection
- Content & Media Services: guards against high-frequency attacks and content scraping, with geo-based access controls for copyright compliance
Conclusion
SafeLine is a production-ready, self-hosted WAF with a broad user base and open community. It provides enterprise-grade protection for web applications, APIs, and services through ML-powered threat detection and flexible deployment options.
Categories:
Tags:
Tech Stack:
Similar Services

Pi-hole
Network-wide DNS sinkhole for ad and tracker blocking
Pi-hole is a network-wide DNS sinkhole that blocks ads and trackers for all devices on your network, with a web dashboard, query logs, and optional DHCP server.


Headscale
Self-hosted control server for Tailscale-based WireGuard networks
Headscale is an open source, self-hosted implementation of the Tailscale control server for managing a private tailnet, nodes, keys, IPs, and routes.

AdGuard Home
Network-wide DNS server that blocks ads, trackers, phishing and malware
Open-source DNS-based ad & tracker blocking server for networks. Offers per-device rules, parental controls, encrypted upstream DNS (DoH/DoT/DNSCrypt), web UI and API.

Web-Check
All-in-one OSINT tool for analyzing any website.
Comprehensive on-demand OSINT to analyze a website's security, architecture, and tech stack.

wg-easy
WireGuard VPN server with a web-based admin interface
Run a WireGuard VPN server with an easy web admin UI to manage clients, generate configs and QR codes, and monitor connections and traffic.

NetBird
WireGuard-based overlay network with SSO/MFA and granular access controls.
Open-source zero-trust networking platform delivering a WireGuard-based private network with centralized access control, SSO/MFA, and cross-platform clients.
