Wafris

An open source web application firewall that identifies threats and blocks attacks, intrusions, bots and dark traffic from within the web stack, including SQL injection and XSS. It sells to developers, IT and operations teams in businesses that operate web applications on frameworks, HTTP servers or Kubernetes ingress controllers. Compared to DNS-based WAF providers, it is positioned as middleware installed inside the existing stack with no DNS changes, executing rules via Redis/SQLite for speed and supporting multiple hosts by default.

Key features

• Block SQL injection and XSS attacks
• Real-time request visualization
• Custom blocking rules for IP and paths
• Rate limiting for traffic control
• IP risk grading and insights
• Multi-host support by default
• Middleware for web frameworks
• Integration with HTTP servers
• Integration with Kubernetes ingress controllers
• Redis and SQLite rule execution