Skip to content
THREATWIRE

Open Source Tools · Category

WAF and edge protection

Web application firewalls and behaviour-based blocking engines that filter malicious traffic in front of applications.

Alternatives toCloudflare WAF

4 tools

  • CrowdSec

    Collaborative behaviour-based IPS

    Security engine that parses logs to detect aggressive behaviour, blocks it with remediation components and shares signals in a community blocklist.

    Stars
    15k
    Forks
    745
    Last commit
    today
    Alternative toCloudflare WAF
  • BunkerWeb

    Nginx-based web application firewall

    WAF and hardened reverse proxy based on Nginx, with ModSecurity and the OWASP CRS, bot protection and a web UI, for Docker, Kubernetes or Linux.

    Stars
    11k
    Forks
    655
    Last commit
    5 days ago
    AGPL-3.0-onlyOpen sourceWAF and edge protection
    Alternative toCloudflare WAF
  • ModSecurity

    Web application firewall engine

    Cross-platform WAF engine (libmodsecurity) for Apache, Nginx and IIS, typically used with the OWASP Core Rule Set. Now an OWASP project.

    Stars
    9.8k
    Forks
    1.8k
    Last commit
    4 days ago
    Apache-2.0Open sourceWAF and edge protection
    Alternative toCloudflare WAF
  • Coraza

    ModSecurity-compatible WAF library in Go

    OWASP WAF library written in Go, compatible with ModSecurity SecLang rules and the OWASP Core Rule Set, embeddable in Go apps and proxies.

    Stars
    3.9k
    Forks
    370
    Last commit
    today
    Apache-2.0Open sourceWAF and edge protection
    Alternative toCloudflare WAF