Topics / #waf

Waf projects on GitHub

Web application firewalls and protective reverse proxies.

As of , the most-starred Waf projects on GitHub are anubis (23.5K stars), SafeLine (22.8K stars) and crowdsec (15.2K stars). GitHub.Locker tracks 7 Waf repositories with 100.6K stars combined. The fastest-growing on October 16 was anubis, with +38 stars in a day.

7Projects
100.6KStars in total
+73Stars in a day
Browse in the catalog →github.com/topics/waf ↗

Hot right now

Most stars gained in a day · Oct 16

+38

anubis

TecharoHQ/anubis · ★ 23.5K

Anubis is a Web AI Firewall Utility that weighs the soul of incoming connections with challenges to protect upstream resources from AI scraper bots — built to defend the small internet from endless storms of AI-company requests.

+12

SafeLine

chaitin/SafeLine · ★ 22.8K

SafeLine is a self-hosted web application firewall (WAF) and reverse proxy that protects your web apps from attacks and exploits by filtering and monitoring HTTP traffic.

+7

crowdsec

crowdsecurity/crowdsec · ★ 15.2K

CrowdSec is an open-source IDS/IPS and WAF that detects malicious behavior by analyzing logs and HTTP requests, blocks bad actors locally, and shares anonymized attack data with a crowdsourced network to build a real-time community blocklist.

+6

sh

kejilion/sh · ★ 3.4K

KejiLion.sh is an all-in-one interactive shell script toolbox for managing Linux servers: system monitoring, network testing, Docker, one-click LDNMP website stacks, backups, and security hardening.

The all-time top

7 projects · by stars

  1. #1 · TecharoHQ/anubis

    anubis

    Anubis is a Web AI Firewall Utility that weighs the soul of incoming connections with challenges to protect upstream resources from AI scraper bots — built to defend the small internet from endless storms of AI-company requests.

    23.5K
  2. #2 · chaitin/SafeLine

    SafeLine

    SafeLine is a self-hosted web application firewall (WAF) and reverse proxy that protects your web apps from attacks and exploits by filtering and monitoring HTTP traffic.

    22.8K
  3. #3 · crowdsecurity/crowdsec

    crowdsec

    CrowdSec is an open-source IDS/IPS and WAF that detects malicious behavior by analyzing logs and HTTP requests, blocks bad actors locally, and shares anonymized attack data with a crowdsourced network to build a real-time community blocklist.

    15.2K
  1. 4

    awesome-web-security

    13.9Kqazbnm456/awesome-web-security · Python

    A curated list of web security materials and resources, organized by vulnerability class and attack type (XSS, SQL injection, CSRF, SSRF, XXE, deserialization, OAuth, JWT, and more), plus cheatsheets, tools, and write-ups for penetration testing.

  2. 5

    bunkerweb

    11.1Kbunkerity/bunkerweb · Python

    BunkerWeb is an open-source, next-generation Web Application Firewall (WAF) built as a full-featured web server on top of NGINX. It protects your web applications and APIs 'secure by default' while integrating as a reverse proxy into your existing environment.

  3. 6

    webshell

    10.8Ktennc/webshell · PHP

    It's a community collection of webshells - scripts that give you control of a web server once uploaded - covering all the common server-side languages and maintained by tennc with 10k+ stars.

  4. 7

    sh

    3.4Kkejilion/sh · Shell

    KejiLion.sh is an all-in-one interactive shell script toolbox for managing Linux servers: system monitoring, network testing, Docker, one-click LDNMP website stacks, backups, and security hardening.

Often tagged together