INTRODUCTION

SafeLine is a self-hosted WAF(Web Application Firewall) to protect your web apps from attacks and exploits.

A web application firewall helps protect web apps by filtering and monitoring HTTP traffic between a web application and the Internet. It typically protects web apps from attacks such as SQL injection, XSS, code injection, os command injection, CRLF injection, ldap injection, xpath injection, RCE, XXE, SSRF, path traversal, backdoor, bruteforce, http-flood, bot abused, among others.

How It Works

By deploying a WAF in front of a web application, a shield is placed between the web application and the Internet. While a proxy server protects a client machine’s identity by using an intermediary, a WAF is a type of reverse-proxy, protecting the server from exposure by having clients pass through the WAF before reaching the server.

A WAF protects your web apps by filtering, monitoring, and blocking any malicious HTTP/S traffic traveling to the web application, and prevents any unauthorized data from leaving the app. It does this by adhering to a set of policies that help determine what traffic is malicious and what traffic is safe. Just as a proxy server acts as an intermediary to protect the identity of a client, a WAF operates in similar fashion but acting as an reverse proxy intermediary that protects the web app server from a potentially malicious client.

its core capabilities include:

• Defenses for web attacks
• Proactive bot abused defense
• HTML & JS code encryption
• IP-based rate limiting
• Web Access Control List

Get Live Demo

Screenshots

FEATURES

1. Block Web Attacks
It defenses for all of web attacks, such as SQL injection, XSS, code injection, os command injection, CRLF injection, XXE, SSRF, path traversal and so on.
2. Rate Limiting
Defend your web apps against DoS attacks, bruteforce attempts, traffic surges, and other types of abuse by throttling traffic that exceeds defined limits.
3. Captcha Challenge
CAPTCHA challenges to protect your website from bot attacks, humen users will be allowed, crawlers and bots will be blocked.
4. Authentication Challenge
When authentication challenge turned on, visitors need to enter the password, otherwise they will be blocked.
5. Dynamic Protection
When dynamic protection turned on, html and js codes in your web server will be dynamically encrypted by each time you visit.

Installing

Information on how to install SafeLine can be found in the Install Guide

Protecting Web Apps

to see Configuration

Is SafeLine Production-Ready?

Yes, SafeLine is production-ready.

• Over 180,000 installations worldwide
• Protecting over 1,000,000 Websites
• Handling over 30,000,000,000 HTTP Requests Daily

Community

Official Website: https://waf.chaitin.com/
Official Discord: Discord
Official GitHub: GitHub