Ross ROSS = Recommend OSS · open-source software intelligence for agents

SafeLine

SafeLine is a self-hosted WAF(Web Application Firewall) / reverse proxy to protect your web apps from attacks and exploits. observed · 2026-10-10

github.com/chaitin/SafeLine · homepage · Go · GPL-3.0 (copyleft) observed · 2026-10-10

Health v2 · maintenance only

96/100

  • Activity 97
  • Release rhythm 97
  • Longevity 91
How is this computed?

round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10) — computed 2026-10-21. Adoption (stars, forks) is never an input.

  • gap_med: 14.0
  • age_days: 1287
  • days_rel: 22
  • days_push: 22
  • n_releases_24m: 29

Full methodology

Adoption not part of the score

22725 stars · 1547 forks observed · 2026-10-10

What it is AI-extracted, prompt v1, taxonomy v1, 2026-10-12, confidence 0.97

SafeLine is a self‑hosted Web Application Firewall and reverse‑proxy written in Go. It protects web services by filtering malicious HTTP traffic using machine‑learning‑driven detection and configurable rules.

Use cases

  • Block SQL injection, XSS and other web‑app attacks before they reach my server
  • Mitigate HTTP flood and DDoS attacks on my public website
  • Add CAPTCHA‑based bot protection for login and form endpoints
  • Deploy a reverse‑proxy that enforces security policies for multiple microservices
  • Implement API gateway security with rate‑limiting and request validation
  • Protect legacy applications that cannot be modified with a front‑line WAF

When to choose

  • You need a self‑hosted, open‑source WAF that can run on‑prem or in your own cloud
  • You want ML‑enhanced threat detection with low false‑positive rates
  • You prefer a single‑binary Go solution that is easy to deploy via Docker or a binary
  • You require built‑in bot protection, CAPTCHA, and HTTP‑flood mitigation

When to avoid

  • You prefer a fully managed SaaS WAF with zero operational overhead
  • Your environment only supports proprietary platforms not covered by Go binaries
  • You need deep integration with a specific commercial WAF ecosystem
  • You have extremely low traffic and the overhead of a reverse‑proxy is unnecessary

Facets

application · maturity active

security api-gateway web-framework middleware security networking windows self-hosted waf reverse-proxy ml-powered captcha bot-protection http-flood sql-injection xss zero-trust web-security linux macos docker

3 sources

Member repositories

RepositoryRoleHealth v2
chaitin/SafeLinemain96
chaitin/lua-resty-t1ksdk77

For agents

markdown · JSON · MCP: product_card(name="chaitin/SafeLine")

Data as of 2026-10-19T08:05:51.212177+00:00 · Report a problem