Self-hosted web application firewall (WAF) and reverse proxy that filters HTTP traffic to block SQL injection, XSS, bots and floods.
22.8K1.6KGoGPL-3.0Updated 21 days ago
2 alternatives
Best open-source alternatives to Cloudflare WAF (2026)
Looking for a free, open-source alternative to Cloudflare WAF? These 2 projects can replace it. Each one passed our quality screening and is explained in plain words, so you can compare stars, license and maintenance at a glance.
Quick comparison
| Project | Stars | License | Last commit |
|---|---|---|---|
| chaitin/SafeLine | ★ 22.8K | GPL-3.0 | 21 days ago |
| fabriziosalmi/caddy-waf | ★ 876 | AGPL-3.0 | 2 days ago |
A Web Application Firewall middleware for the Caddy web server, with regex rules, IP/DNS/ASN/GeoIP filtering, rate limiting and Tor exit-node blocking.
87637GoAGPL-3.0Updated 2 days ago
FAQ
- Is there a free, open-source alternative to Cloudflare WAF?
- Yes. The most popular open-source alternatives to Cloudflare WAF on Repolode are SafeLine, caddy-waf.
- Which Cloudflare WAF alternative should I choose?
- SafeLine has the most GitHub stars and is released under GPL-3.0. Compare the license and last commit of each option in the table above before choosing.