Dev tools · alternatives · 2026
24 alternatives to Nemesida WAF
Comprehensive WebApp and API protection
Below are 24 products that do a similar job, ranked by how close each is in meaning and then by launch-day votes.
- 1
- 2
🛡️ Open-source and cloud-native Web Application Firewall (WAF) - bunkerity/bunkerweb
2024 · github.com · its alternatives →
- 3
Handy, High performance, ModSecurity compatible Nginx firewall module & 方便、高性能、兼容 ModSecurity 的 Nginx 防火墙模块 - ADD-SP/ngx_waf
2021 · github.com · its alternatives →
- 4
- 5
Nginx system WAF, Domain Management Real-time Monitoring
2025 · github.com · its alternatives →
- 6
Picteto▲4Smart WAF for everyone. Block threats before they hit.
Jun 2026 · picteto.cl · its alternatives →
- 7
A lightweight WAF with a hacker style
Feb 2026 · defender.flmelody.org · its alternatives →
- 8
- 9
Documentation of BunkerWeb, the open source and next generation WAF.
2025 · docs.bunkerweb.io · its alternatives →
- 10SA
Hi HN, I’ve been working on Shibuya, a next-generation Web Application Firewall (WAF) built from the ground up in Rust. I wanted to build a WAF that didn't just rely on legacy regex signatures but could understand intent and perform at line-rate using modern kernel features. What makes Shibuya different: Multi-Layer Pipeline: It integrates a high-performance proxy (built on Pingora) with rate limiting, bot detection, and threat intelligence. eBPF Kernel Filtering: For volumetric attacks, Shibuya can drop malicious packets at the kernel level using XDP before they consume userspace resources.…
Feb 2026 · ghostklan.com · its alternatives →
- 11
Fool attackers and protect your web services with BunkerWeb, the open-source and next-gen Web Application Firewall (WAF).
Jan 2026 · bunkerweb.io · its alternatives →
- 12
- 13
Setup in minutes, protect your assets from the edge
Feb 2026 · atomicedge.io · its alternatives →
- 14
- 15
SudoApp▲127The 100% private, unlimited messaging and calling app.
2016 · anonyome.com · its alternatives →
- 16
- 17
WAF and gateway with private key encryption, load balancing.
2018 · janusec.com · its alternatives →
- 18
LoginLlama▲95Hey HN I recently rebuilt my microsaas Loginllama. It uses the same stack but I've made the API much much better and it's now a product I'm happy to promote. As with most developers I hide behind building instead of marketing. As this a developer focused product, this is me marketing! It's a product built in anger for myself when I had to implement a similar system for a number of clients. I released it as I assume that other people had the same problem. There are SDK's available for Nodejs, PHP and Python. Auth0 and Wordpress integrations are coming soon. Let me know what you think and if…
2023 · loginllama.app · its alternatives →
- 19
The fast and secure Load Balancer / API Gateway / Reverse Proxy with built-in service discovery, GeoIP, WAF, bot protection and much more - https://pingoo.io - pingooio/pingoo
2025 · github.com · its alternatives →
- 20
We're excited to announce Lowdefy V4, a full-stack web framework built on top of Next.js that simplifies building web applications, internal tools, admin panels, BI dashboards, and CRUD apps using YAML or JSON configuration files. New in V4: Next.js: Lowdefy now runs on top of the Next.js framework. All of Auth.js: App auth is now handled by Auth.js supported providers, adapters and callbacks and events, easy to configure, but all of which can be customized. Plugin extensibility: Apps can now be extended with any npm or pnpm workspace plugins. Our story: We have developed a simple…
2021 · lowdefy.com · its alternatives →
- 21
MetaShield▲102A chrome extension to keep your ETH & NFTs safe from scams
2021 · chromewebstore.google.com · its alternatives →
- 22
This past quarter has been awash with sophisticated npm supply chain attacks like [Shai-Hulud](https://www.cisa.gov/news-events/alerts/2025/09/23/widesprea...() and the [Chalk/debug Compromise](https://www.wiz.io/blog/widespread-npm-supply-chain-attack-b...). This CLI helps protect users from recently compromised packages by only downloading packages that have been public for a while (default is 90 days or older). Install: npm install -g @dendronhq/safe-npm Usage: safe-npm install react@^18 lodash How it works: - Queries…
Nov 2025 · github.com · its alternatives →
- 23
Cloud antibot and antispam protection for PHP websites
2021 · antibot.cloud · its alternatives →
- 24
This is a small PoC Python project for web server access logs analyzing to classify and dynamically block bad bots, such as L7 (application-level) DDoS bots, web scrappers and so on. We'll be happy to gather initial feedback on usability and features, especialy from people having good or bad experience wit bots. *Requirements* The analyzer relies on 3 Tempesta FW specific features which you still can get with other HTTP servers or accelerators: 1. JA5 client fingerprinting (https://tempesta-tech.com/knowledge-base/Traffic-Filtering-b...). This is a HTTP and TLS layers…
2025 · github.com · its alternatives →
Also compare
Ranked by how close each launch is in meaning, then by votes. Prices were read from each product’s own site when checked and can change. Refine with your own description →