nbs-system/naxsi

Health v2 · maintenance only

Flags: archived

Adoption not part of the score

4811 stars · 598 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-29, confidence not recorded

NAXSI is a high-performance, low-maintenance web application firewall (WAF) implemented as a third-party NGINX module written in C. Instead of relying on attack signatures, it uses a small set of default-deny pattern rules and requires administrators to whitelist legitimate behavior, optionally via an auto-learning phase.

Use cases

• protect a website from XSS and SQL injection attacks
• add a WAF to an existing NGINX server
• block suspicious requests by default and whitelist legitimate traffic
• run a web application firewall without maintaining large signature databases
• auto-learn whitelisting rules from a site's traffic

When to choose

• you already run NGINX and want an integrated, lightweight WAF
• you prefer a deny-by-default model over signature-based filtering
• you want low rules-maintenance overhead

When to avoid

• you need actively maintained software - this repository is archived; use the wargio/naxsi fork instead
• you need a WAF for servers other than NGINX
• you want out-of-the-box protection without a whitelist tuning/learning phase

Facets

plugin · maturity abandoned

security middleware http-server security web-development backend bsd waf nginx-module xss-protection sql-injection drop-by-default whitelist-learning linux nginx web-server

Member repositories

For agents

markdown · JSON · MCP: product_card(name="nbs-system/naxsi")