baidu/openrasp

Health v2 · maintenance only

Adoption not part of the score

2987 stars · 623 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

OpenRASP is Baidu's open-source Runtime Application Self-Protection (RASP) solution that embeds a protection engine directly into the application server via instrumentation (Java agent and PHP extension). It hooks sensitive functions like database queries, file operations, and network requests to detect and block attacks contextually, with detection logic customizable through JavaScript plugins.

Use cases

• protect web applications from SQL injection and code injection attacks
• detect deserialization vulnerabilities at runtime
• replace or supplement a WAF with context-aware in-app protection
• integrate attack alerts into SIEM/SOC platforms like ELK or Splunk
• run IAST gray-box vulnerability scanning during security testing
• block OWASP Top 10 attacks on Tomcat, JBoss, WebLogic, or PHP servers

When to choose

• you need runtime protection that only alerts on successful attacks, reducing false positives
• your WAF is being bypassed due to protocol quirks or backend-specific behavior
• you want detailed stack traces for forensic analysis of exploitation attempts
• you need customizable detection logic via JavaScript plugins across platforms
• you run Java or PHP application servers on Linux and want free, self-hosted RASP

When to avoid

• your stack is Node.js, Python, Ruby, Go, or .NET, which are not yet supported
• you need a perimeter defense filtering requests before they reach the app rather than in-process protection
• you cannot tolerate any performance overhead or application restarts during installation
• you require a managed cloud service rather than self-hosted components

Facets

library · maturity stable

security monitoring alerting logging plugin-system security web-development backend self-hosted windows jvm php self-hosted rasp runtime-application-self-protection waf-alternative iast devsecops java-agent php-extension intrusion-detection siem-integration vulnerability-protection devops linux macos docker

Member repositories

For agents

markdown · JSON · MCP: product_card(name="baidu/openrasp")