Self-hosted projects tagged “WAF”

SafeLine is a self-hosted Web Application Firewall (WAF) and reverse proxy that defends web apps from SQL injection, XSS, bot abuse, and DDoS using ML-powered threat detection and configurable policies.

GPL-3.0Actively maintained

Alternative to:

Cloudflare Web Application Firewall (WAF)+7

Anubis is a lightweight web AI firewall that protects sites from AI crawlers and scraping bots using configurable request challenges and bot policies.

MITActively maintained

Alternative to:

Cloudflare Web Application Firewall (WAF)+10

CrowdSec is an open-source security engine that detects attacks from logs and blocks malicious IPs using bouncers and community-curated threat intelligence.

MITActively maintained

Alternative to:

Fail2Ban+10

BunkerWeb is an open-source WAF and NGINX-based reverse proxy to protect web apps and APIs with HTTPS automation, security policies, and extensible plugins.

AGPL-3.0Actively maintained

Alternative to:

Cloudflare Web Application Firewall (WAF)+10

LinuxServer.io SWAG is a Docker image bundling Nginx reverse proxy, ACME certificate automation (Let’s Encrypt/ZeroSSL), optional PHP, and fail2ban intrusion prevention.

GPL-3.0Actively maintained

Alternative to:

Apache HTTP Server+9

High-performance web application firewall and API security gateway with semantic detection, rule management, and reverse-proxy deployment for protecting websites and APIs.

BSD-2-ClauseActively maintained

Alternative to:

Cloudflare Web Application Firewall (WAF)+9

High-performance Rust proxy supporting HTTP/SOCKS5 forwarding, transparent proxying, TLS MITM, ICAP integration, ACLs, auth, and observability features.

Apache-2.0Actively maintained

Alternative to:

Bright Data+10

NetGoat is a self-hostable reverse proxy and traffic management platform offering Cloudflare-like features such as TLS termination, rate limiting, WAF-style filtering, and dashboards.

AGPL-3.0Actively maintained

Alternative to:

Cloudflare+11