Alternatives
Products that do what GitHub does
App firewall for your website.
- 1
🛡️ Open-source and cloud-native Web Application Firewall (WAF) - bunkerity/bunkerweb
2024 · github.com
- 2NW
2021 · github.com
- 3BT
2025 · docs.bunkerweb.io
- 4
- 5
- 6
- 7
- 8PA
Sep 2025 · github.com
- 9
- 10
- 11
Nginx system WAF, Domain Management Real-time Monitoring
Oct 2025
- 12
- 13PA
PFELK is a pfSense/OPNsense firewall traffic visualization solution based on ELK stack. It is a highly customizable tool that let’s you have extensive insight into your network traffic. Key points: - pfSense/OPNsense support - openVPN support - pfSense/Suricata/Snort dashboards with interactive Maps support (MaxMind GeoIp fields, src -> dest locations, Heatmap, etc.) - deploy with ansible-playbook, docker or script. https://github.com/3ilson/pfelk
2020
- 14
- 15GR
Hey guys and gals! I'm learning Go at the moment and LOVING it. I was hoping to get constructive feedback on a project I'm working on - goatee - which is a notification server that utilizes Redis pub/sub and WebSockets. It's fairly bare-bones at the moment but I'm hoping to add in a lot more features as time goes on such as queueing and WebSocket channel subscriptions (via Go Socketio possibly).
2014 · github.com
- 16SA
Hi HN, I’ve been working on Shibuya, a next-generation Web Application Firewall (WAF) built from the ground up in Rust. I wanted to build a WAF that didn't just rely on legacy regex signatures but could understand intent and perform at line-rate using modern kernel features. What makes Shibuya different: Multi-Layer Pipeline: It integrates a high-performance proxy (built on Pingora) with rate limiting, bot detection, and threat intelligence. eBPF Kernel Filtering: For volumetric attacks, Shibuya can drop malicious packets at the kernel level using XDP before they consume userspace resources.…
Feb 2026 · ghostklan.com
- 17
- 18
- 19
- 20AN
Hi HN! I'd love to seek your insights on a fullstack web framework that employs a different approach: no build. It's not a new concept. The folks as Preact mentioned it: https://preactjs.com/guide/v10/no-build-workflows/ However, in the Web Framework market, I've yet to find many that support both "no build" and "SSR". There's always some sorts of "client mount" and "server mount" and either has (or both have) to go through a build (bundling) process. With the build process, there comes additional maintenance efforts and cognitive load. I've enjoyed wrestling…
2025 · jsr.io
- 21
- 22MN
This is an educational reference implementation showing how to build reasonably secure, standards-compliant authentication from first principles on Cloudflare Workers. Stack: Hono, Turso (libSQL), PBKDF2-SHA384 + normalization + common-password checks, JWT access + refresh tokens with revocation support, HTTP-only SameSite cookies, device tracking. It's deliberately minimal — no OAuth, no passkeys, no magic links, no rate limiting — because the goal is clarity and auditability. I wrote it mainly to deeply understand edge-runtime auth constraints and to have a clean Apache-2.0 example that…
Feb 2026 · github.com
- 23
- 24
Ranked by how close each launch is in meaning, then by votes. Refine with a description →