chaitin/safelineSelf-hosted WAF and reverse proxy that filters malicious HTTP traffic, blocks SQL injection, XSS, and bot attacks, with rate limiting and dynamic HTML/JS encryption.
🏠 Website | 📖 Docs | 🔍 Live Demo | 🙋♂️ Discord | 中文版
SafeLine is a self-hosted WAF(Web Application Firewall) to protect your web apps from attacks and exploits.
A web application firewall helps protect web apps by filtering and monitoring HTTP traffic between a web application and the Internet. It typically protects web apps from attacks such as SQL injection, XSS, code injection, os command injection, , , , , , , , , , , , among others.
CRLF injectionldap injectionxpath injectionRCEXXESSRFpath traversalbackdoorbruteforcehttp-floodbot abused
By deploying a WAF in front of a web application, a shield is placed between the web application and the Internet. While a proxy server protects a client machine’s identity by using an intermediary, a WAF is a type of reverse-proxy, protecting the server from exposure by having clients pass through the WAF before reaching the server.
A WAF protects your web apps by filtering, monitoring, and blocking any malicious HTTP/S traffic traveling to the web application, and prevents any unauthorized data from leaving the app. It does this by adhering to a set of policies that help determine what traffic is malicious and what traffic is safe. Just as a proxy server acts as an intermediary to protect the identity of a client, a WAF operates in similar fashion but acting as a reverse proxy intermediary that protects the web app server from a potentially malicious client.
its core capabilities include:
 |  |
|---|---|
 |  |
Get Live Demo
List of the main features as follows:
Block Web Attacks
SQL injection, XSS, code injection, os command injection, CRLF injection, XXE, SSRF, path traversal and so on.Rate Limiting
DoS attacks, bruteforce attempts, traffic surges, and other types of abuse by throttling traffic that exceeds defined limits.Anti-Bot Challenge
bot attacks, humen users will be allowed, crawlers and bots will be blocked.Authentication Challenge
Dynamic Protection
| Legitimate User | Malicious User | |
|---|---|---|
Block Web Attacks |  |  |
Rate Limiting | |  |
Anti-Bot Challenge |  |  |
Auth Challenge |  |  |
HTML Dynamic Protection |  |  |
JS Dynamic Protection |  |
[!WARNING] 中国大陆用户安装国际版可能会导致无法连接云服务，请查看 中文版安装文档
Information on how to install SafeLine can be found in the Install Guide
to see Configuration
| Metric | ModSecurity, Level 1 | CloudFlare, Free | SafeLine, Balance | SafeLine, Strict |
|---|---|---|---|---|
| Total Samples | 33669 | 33669 | 33669 | 33669 |
| Detection | 69.74% | 10.70% | 71.65% | 76.17% |
| False Positive | 17.58% | 0.07% | 0.07% | 0.22% |
| Accuracy | 82.20% | 98.40% | 99.45% | 99.38% |
Yes, SafeLine is production-ready.
Join our Discord to get community support, the core team members are identified by the STAFF role in Discord.
Several contact options exist for our community, the primary one being Discord. These are in addition to GitHub issues for creating a new issue.
Coming soon!
See LICENSE for details.
 |