Open-source, auditable network gateway for homelabs, NAS and servers: DDNS, STUN traversal, port forwarding with SNI routing, reverse proxy and web server, ACME certificates, WAF, Tailscale, frp, Cloudflare Tunnel, Docker and web terminal in one binary. Runs on Docker, fnOS, OpenWrt, Linux, macOS, Windows; imports Lucky configs.
Waf GitHub Repositories (2026) · Open Source Tools
Discover the best Waf open source repositories on GitHub. Explore trending tools, live star counts, source code, and developer projects updated daily.
ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx. It has a robust event-based programming language which provides protection from a range of attacks against web applications and allows for HTTP traffic monitoring, logging and real-time analysis.
Traefik plugin for Crowdsec - WAF and IP protection
Open-source IDS/IPS, WAF and bot detection for Linux, Windows, Docker and Kubernetes, with a crowdsourced blocklist of malicious IPs.
Linux defense. Your host. Your rules. Host-local Linux defense with auditable, fail-closed enforcement.
OWASP Coraza WAF is a golang modsecurity compatible web application firewall library
Web Application Firewall Testing Framework - Go version
Padrino is a full-stack ruby framework built upon Sinatra.
OWASP CRS (Official Repository)
Web interface for managing Haproxy, Nginx, Apache and Keepalived servers
Win Application Framework (WAF) is a lightweight Framework that helps you to create well structured XAML Applications.
A security-first reverse proxy built to guard the free web.
CIDRAM: Classless Inter-Domain Routing Access Manager.
Distributed, centrally-controlled Web Application Firewall built on pingap & Cloudflare Pingora. Semantic attack detection, Cloudflare-style rules, CC & Bot defense, automatic TLS, embedded i18n dashboard.