jx-sec/jxwaf

Health v2 · maintenance only

Adoption not part of the score

1228 stars · 268 forks observed · 2026-10-19

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

JXWAF is an open-source web application firewall powered by an AI large language model, combining an AI security model, a semantic analysis engine, and SSL behavior analysis to detect and block web attacks in real time. It is deployed as a reverse proxy built on OpenResty/nginx-lua, with a Vue-based management console and one-command Docker Compose deployment.

Use cases

• protect my website from sql injection and xss attacks
• deploy a self-hosted web application firewall
• block cc attacks and bot traffic
• detect 0day web exploits without writing rules
• filter malicious http traffic before it reaches my app
• reduce waf false positives with ai-based detection
• set up a reverse proxy waf with docker compose

When to choose

• you want a free, self-hosted WAF with AI/semantic detection rather than pure regex rules
• you need protection against SQL injection, XSS, RCE, and nday/0day exploits with low false positives
• you want CC attack and crawler detection via SSL fingerprinting
• you can run a Linux server with Docker and prefer one-command deployment

When to avoid

• you need a cloud-managed WAF with no infrastructure to maintain
• you require multi-tenant or CNAME-based cloud WAF features on the free standard edition
• your environment cannot run Docker or meet the 4-core/8GB hardware requirement
• you depend on a vendor with long-term commercial support commitments

Facets

application · maturity active

security http-server monitoring machine-learning llm-inference rate-limiting security web-development large-language-models self-hosted apis self-hosted python waf web-application-firewall nginx-lua openresty sql-injection xss cc-attack-protection bot-detection semantic-analysis reverse-proxy docker-compose linux docker web-server

Member repositories

For agents

markdown · JSON · MCP: product_card(name="jx-sec/jxwaf")