Life & fun · alternatives · 2026
24 alternatives to CSRF Protection Using Cloudflare Workers
Protect any origin from CSRF by checking if the Origin/Referer header match the Host header for "unsafe" methods. - csrf-protection-cloudflare-worker.js
Below are 24 products that do a similar job, ranked by how close each is in meaning and then by launch-day votes. CSRF Protection Using Cloudflare Workers launched in 2018; newer entries below may have overtaken it.
- 1OS
I've been working on this for some time now, starting with vm2, then deno-core for 2 years, and recently rewrote it on rusty_v8 with Claude's help. OpenWorkers lets you run untrusted JS in V8 isolates on your own infrastructure. Same DX as Cloudflare Workers, no vendor lock-in. What works today: fetch, KV, Postgres bindings, S3/R2, cron scheduling, crypto.subtle. Self-hosting is a single docker-compose file + Postgres. Would love feedback on the architecture and what feature you'd want next.
Jan 2026 · openworkers.com · its alternatives →
- 2
The Internet’s fastest, privacy-first DNS resolver
2018 · one.one.one.one · its alternatives →
- 3
The 1.1.1.1 App▲689Faster, more private internet by Cloudflare, now on mobile
2018 · apps.apple.com · its alternatives →
- 4
- 5AS
2017 · cloudbleed.github.io · its alternatives →
- 6CM
whenever I click through to a site managed through cloudflare I end up seeing a screen asking me to identify myself. This has happened often enough especially with HN articles that I just close some articles outright and read the discussion on HN instead. As an experiment I setup cloudflare for website of mine which gets majority of its traffic from Pakistan (where I am located). This is what I see https://dl.dropbox.com/u/8037186/cloudflare.png It basically shows cloudflare marking 100% of traffic from Pakistan as known threats. I would be interested to find out if its a common problem…
2012 · dl.dropbox.com · its alternatives →
- 7
- 8
Cloudflare Drop▲367Drop your folder in browser & deploy instantly on Cloudflare
Jul 2026 · cloudflare.com · its alternatives →
- 9
Express.js middleware for "Host" and "Referer" header validation to protect against DNS rebinding attacks. - brannondorsey/host-validation
2018 · github.com · its alternatives →
- 10WI
Test CORS online with our free CORS tester. Check CORS on any URL for free.
2020 · willitcors.com · its alternatives →
- 11
Workers Sites▲148Deploy blazing fast static sites and serverless functions.
2019 · cloudflare.com · its alternatives →
- 12
Cloudflare management made simple, right from your phone
2025 · kyno.dev · its alternatives →
- 13
- 14
Kafka 0.8.0 broker implementation on top of Cloudflare Workers - maxwellpeterson/kafka-worker
2022 · github.com · its alternatives →
- 15
Cloud antibot and antispam protection for PHP websites
2021 · antibot.cloud · its alternatives →
- 16
BoringSSL and nghttp2. Matches JA3N, JA4, and JA4_R fingerprints. Supports HTTP/2, async/await, and works with Cloudflare-protected sites. Not trying to compete with curl_cffi - just a learning project that turned into something functional.
Nov 2025 · github.com · its alternatives →
- 17
- 18
Tabserve gives you a https url for localhost using only the browser (tabserve.dev). Take a look: https://tabserve.dev
2023 · tabserve.dev · its alternatives →
- 19
- 20
Run JavaScript in Cloudflare’s 120 data centers
2018 · developers.cloudflare.com · its alternatives →
- 21
MetaShield▲102A chrome extension to keep your ETH & NFTs safe from scams
2021 · chromewebstore.google.com · its alternatives →
- 22
Read this article by Cloudflare this morning https://blog.cloudflare.com/code-mode/ the main argument being that LLMs are much better at writing typescript code than tool calls because they've seen typescript code many more times. HN Discussion: https://news.ycombinator.com/item?id=45399204 https://news.ycombinator.com/item?id=45386248 Deno provides a great sandbox environment for Typescript code execution because of its permissions system which made it easy to spin up code that only has access to fetch and network calls. Stick an MCP proxy…
2025 · github.com · its alternatives →
- 23
Shmauthor here. Built this for myself, putting it out in case it's useful. Needed any URL as clean Markdown for LLM context — including Cloudflare/anti-bot sites. curl gets HTTP 403 on those, raw HTML is 80%+ nav noise eating context, paid SaaS (Firecrawl, Jina) wasn't an option for me. It's a Docker wrapper around two existing OSS tools — CloakBrowser (stealth Chromium that passes Cloudflare) and rs-trafilatura (HTML → Markdown). No new scraper, just glue. Runs locally, my URLs stay on my box Token reduction (raw curl HTML vs snitchmd, tiktoken cl100k_base): -…
Apr 2026 · github.com · its alternatives →
- 24
HTTPS domains for localhost. 🏠. Contribute to lufzle/localdots development by creating an account on GitHub.
2019 · github.com · its alternatives →
Also compare
Ranked by how close each launch is in meaning, then by votes. Prices were read from each product’s own site when checked and can change. Refine with your own description →