Repolode
Enviar
chaitin

chaitin/SafeLine

Self-hosted web application firewall (WAF) and reverse proxy that filters HTTP traffic to block SQL injection, XSS, bots and floods.

Alternativa open source a:Cloudflare WAFModSecurity

Ver no GitHubSite
Estrelas
22,780
Forks
1,554
Issues abertas
50
Último commit
há 21 dias

O que é?

SafeLine is a self-hosted web application firewall that sits between your web application and the Internet as a reverse proxy. All HTTP and HTTPS traffic passes through it, so malicious requests can be filtered or blocked before they reach your server.

It covers common web attacks such as SQL injection, XSS, code and OS command injection, path traversal, SSRF and XXE. Beyond attack signatures, it adds IP-based rate limiting against brute force and HTTP floods, an anti-bot challenge that lets human visitors through while stopping crawlers, and an optional password prompt for access control.

The project also offers dynamic protection, which encrypts HTML and JavaScript on each visit. Integrations are provided for Ingress-NGINX on Kubernetes, Kong Gateway, and an MCP server for AI-assisted management. A PRO edition is offered alongside the open-source version.

Recursos principais

  • 01Blocks common web attacks including SQL injection, XSS, command injection and SSRF.
  • 02Rate limiting by IP to counter brute force attempts and HTTP floods.
  • 03Anti-bot challenge that admits human visitors and blocks crawlers.
  • 04Optional password authentication challenge for visitors.
  • 05Dynamic encryption of HTML and JavaScript on each visit.

Casos de uso

  • Protecting a self-hosted website or API exposed to the Internet from common web exploits.
  • Adding bot and brute-force protection in front of a login page.
  • Guarding Kubernetes ingress traffic via the Ingress-NGINX plugin.
  • Protecting APIs routed through Kong Gateway.

Tópicos

#waf#web-security#reverse-proxy#firewall#bot-protection#rate-limiting#self-hosted#api-gateway#application-security#appsec

Perguntas frequentes

O que é SafeLine?
Self-hosted web application firewall (WAF) and reverse proxy that filters HTTP traffic to block SQL injection, XSS, bots and floods. SafeLine is a self-hosted web application firewall that sits between your web application and the Internet as a reverse proxy. All HTTP and HTTPS traffic passes through it, so malicious requests can be filtered or blocked before they reach your server.
SafeLine é gratuito? Qual é a licença?
SafeLine é open source sob a licença GPL-3.0. Confira os termos da licença antes de usá-lo em produtos comerciais.
SafeLine ainda é mantido?
Manutenção ativa. O último commit de SafeLine foi em 28 de set. de 2026.
Para que posso usar SafeLine?
Protecting a self-hosted website or API exposed to the Internet from common web exploits. Adding bot and brute-force protection in front of a login page. Guarding Kubernetes ingress traffic via the Ingress-NGINX plugin. Protecting APIs routed through Kong Gateway.
Onde consigo SafeLine?
O código-fonte e as instruções de instalação estão no GitHub: https://github.com/chaitin/SafeLine

Resumo gerado por IA a partir do README do projeto. As estatísticas do GitHub são atualizadas diariamente.

Projetos relacionados