Browse & filter

Filter by platform, license text, maturity, maintenance cadence, and editorial tags like privacy-focused or self-hosted. Search matches names, summaries, tags, and use cases.

ModSecurity

Also strong

Web application firewall engine for Apache, nginx, and IIS with OWASP CRS rule sets and audit logging.

wafwebowaspreverse-proxy

Security & Privacy

BunkerWeb

Honorable mention

Open-source WAF and hardening layer with nginx core.

wafnginxsecurity