#1Bot detection, CAPTCHA, rate limiting, behavioral analysis, and automated threat prevention tools.
Kitploit recommended
caddyserver/caddyFast and extensible multi-platform HTTP/1-2-3 web server with automatic HTTPS
d4vinci/scraplingAdaptive web scraping framework with anti-bot bypass, automatic element relocation, concurrent crawling, proxy rotation, and browser automation for…
projectdiscovery/nucleiFast YAML-based vulnerability scanner with template-driven detection engine for automated security testing across web apps, APIs, networks, DNS, and…
wazuh/wazuhOpen-source XDR and SIEM platform for threat detection, log analysis, file integrity monitoring, vulnerability assessment, and compliance management…
apify/crawleeNode.js web scraping and browser automation library for building reliable crawlers with HTTP and headless browser support, proxy rotation, and…
chaitin/safelineSelf-hosted WAF and reverse proxy that filters malicious HTTP traffic, blocks SQL injection, XSS, and bot attacks, with rate limiting and dynamic…
fail2ban/fail2banDaemon to ban hosts that cause multiple authentication errors
crowdsecurity/crowdsecOpen-source IDS/IPS and WAF engine that analyzes logs and HTTP requests to detect and block malicious IPs, leveraging a crowdsourced community…
owasp-modsecurity/modsecurityModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx. It has a robust event-based…
ultrafunkamsterdam/undetected-chromedriverCustom Selenium Chromedriver | Zero-Config | Passes ALL bot mitigation systems (like Distil / Imperva/ Datadadome / CloudFlare IUAM)
zeek/zeekZeek is a powerful network analysis framework that is much different from the typical IDS you may know.
falcosecurity/falcoReal-time cloud-native runtime security agent for Linux that monitors syscalls and container/Kubernetes metadata to detect anomalous behavior and…
bunkerity/bunkerweb🛡️ Open-source and cloud-native Web Application Firewall (WAF)
stamparm/maltrailReal-time malicious traffic detection system using public blacklists, static malware trails, and heuristic analysis to identify threats across DNS,…
oisf/suricataOpen-source network IDS/IPS/NSM engine for real-time traffic inspection, intrusion detection and prevention, protocol analysis, and rule-based threat…
ultrafunkamsterdam/nodriverSuccessor of Undetected-Chromedriver. Providing a blazing fast framework for web automation, webscraping, bots and any other creative ideas which are…
