# jx-sec/jxwaf

JXWAF是一款基于AI大模型的Web应用防火墙

Repository: https://github.com/jx-sec/jxwaf
Canonical: https://ross.abutalabs.com/products/jxwaf
Homepage: https://www.jxwaf.com/
Language: Vue
License: GPL-2.0
License Family: copyleft
Topics: waf, openresty, jxwaf, nginx-lua, ai
Last push: 2026-08-25T04:59:57+00:00

## Health v2 (maintenance only)
Score: 67/100 (v2, computed 2026-09-02T17:46:02.011165+00:00)
- activity 99, release rhythm 8, longevity 100
- inputs: {"age_days": 3185, "days_push": 8, "days_rel": 523, "gap_med": null, "n_releases_24m": 1}
- flags: none
- formula: round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10)

## Adoption (not part of the score)
Stars 1219, forks 266 (observed 2026-08-28T04:04:01.655557+00:00)

## What it is
JXWAF is an open-source web application firewall powered by an AI large language model, combining an AI security model, a semantic analysis engine, and SSL behavior analysis to detect and block web attacks in real time. It is deployed as a reverse proxy built on OpenResty/nginx-lua, with a Vue-based management console and one-command Docker Compose deployment.

## Use cases
- protect my website from sql injection and xss attacks
- deploy a self-hosted web application firewall
- block cc attacks and bot traffic
- detect 0day web exploits without writing rules
- filter malicious http traffic before it reaches my app
- reduce waf false positives with ai-based detection
- set up a reverse proxy waf with docker compose

## When to choose
- you want a free, self-hosted WAF with AI/semantic detection rather than pure regex rules
- you need protection against SQL injection, XSS, RCE, and nday/0day exploits with low false positives
- you want CC attack and crawler detection via SSL fingerprinting
- you can run a Linux server with Docker and prefer one-command deployment

## When to avoid
- you need a cloud-managed WAF with no infrastructure to maintain
- you require multi-tenant or CNAME-based cloud WAF features on the free standard edition
- your environment cannot run Docker or meet the 4-core/8GB hardware requirement
- you depend on a vendor with long-term commercial support commitments

## Facets
- artifact type: application
- maturity: active
- function: security, http-server, monitoring, machine-learning, llm-inference, rate-limiting
- domain: security, web-development, large-language-models, self-hosted, apis
- platform: self-hosted, python
- tags: waf, web-application-firewall, nginx-lua, openresty, sql-injection, xss, cc-attack-protection, bot-detection, semantic-analysis, reverse-proxy, docker-compose, linux, docker, web-server

## Member repositories
- jx-sec/jxwaf (main) score 67

## Provenance
- Observed fields: from GitHub, fetched 2026-08-28T04:04:01.655557+00:00.
- Health v2: computed from the inputs above; adoption is never an input.
- Inferred fields (summary, facets, guidance): AI-extracted, prompt v1, taxonomy v1, on 2026-08-30T06:16:13.631647+00:00, confidence not recorded.
  - readme: https://github.com/jx-sec/jxwaf (fetched 2026-08-28T04:04:01.655557+00:00, sha 773a9a3e892d)
  - homepage: https://www.jxwaf.com/ (fetched 2026-08-29T12:24:30.131329+00:00, sha 3a59e1a208b3)
- Data as of 2026-08-30T08:39:29.467469+00:00.