Topics / #web-application-firewall

Web-application-firewall projects on GitHub

Firewalls filtering malicious HTTP traffic to protect web applications.

As of October 17, 2026, the most-starred Web-application-firewall projects on GitHub are SafeLine (22.8K stars), XSStrike (15.2K stars) and crowdsec (15.2K stars). GitHub.Locker tracks 5 Web-application-firewall repositories with 64.8K stars combined. The fastest-growing on October 16 was SafeLine, with +12 stars in a day.

5Projects

64.8KStars in total

+27Stars in a day

Browse in the catalog →github.com/topics/web-application-firewall ↗

Hot right now

Most stars gained in a day · Oct 16

+12

SafeLine

chaitin/SafeLine · ★ 22.8K

SafeLine is a self-hosted web application firewall (WAF) and reverse proxy that protects your web apps from attacks and exploits by filtering and monitoring HTTP traffic.

crowdsec

crowdsecurity/crowdsec · ★ 15.2K

CrowdSec is an open-source IDS/IPS and WAF that detects malicious behavior by analyzing logs and HTTP requests, blocks bad actors locally, and shares anonymized attack data with a crowdsourced network to build a real-time community blocklist.

bunkerweb

bunkerity/bunkerweb · ★ 11.1K

BunkerWeb is an open-source, next-generation Web Application Firewall (WAF) built as a full-featured web server on top of NGINX. It protects your web applications and APIs 'secure by default' while integrating as a reverse proxy into your existing environment.

XSStrike

s0md3v/XSStrike · ★ 15.2K

XSStrike is a Cross Site Scripting (XSS) detection suite built around four hand-written parsers, an intelligent payload generator, a fuzzing engine, and a fast crawler. Instead of just firing generic payloads like most scanners, it analyzes the live response and crafts payloads guaranteed to work through context analysis.

The all-time top

5 projects · by stars

#1 · chaitin/SafeLine
SafeLine
SafeLine is a self-hosted web application firewall (WAF) and reverse proxy that protects your web apps from attacks and exploits by filtering and monitoring HTTP traffic.
22.8K
#2 · s0md3v/XSStrike
XSStrike
XSStrike is a Cross Site Scripting (XSS) detection suite built around four hand-written parsers, an intelligent payload generator, a fuzzing engine, and a fast crawler. Instead of just firing generic payloads like most scanners, it analyzes the live response and crafts payloads guaranteed to work through context analysis.
15.2K
#3 · crowdsecurity/crowdsec
crowdsec
CrowdSec is an open-source IDS/IPS and WAF that detects malicious behavior by analyzing logs and HTTP requests, blocks bad actors locally, and shares anonymized attack data with a crowdsourced network to build a real-time community blocklist.
15.2K

4
bunkerweb
11.1Kbunkerity/bunkerweb · Python
BunkerWeb is an open-source, next-generation Web Application Firewall (WAF) built as a full-featured web server on top of NGINX. It protects your web applications and APIs 'secure by default' while integrating as a reverse proxy into your existing environment.
5
patchright-enhanced
498whaleyxbt/patchright-enhanced · TypeScript
It's a stealth browser automation toolkit built on top of Patchright (a patched Playwright) aimed at QA testing, monitoring, scraping, and penetration testing. It focuses on producing clean Chrome sessions that get past WAFs like Cloudflare, Kasada, and DataDome out of the box.