# chaitin/SafeLine

SafeLine is a self-hosted WAF(Web Application Firewall) / reverse proxy to protect your web apps from attacks and exploits.

Repository: https://github.com/chaitin/SafeLine
Canonical: https://ross.abutalabs.com/products/safeline
Homepage: https://ly.safepoint.cloud/fUxS0GW
Language: Go
License: GPL-3.0
License Family: copyleft
Topics: firewall, http-flood, security, sql-injection, waf, web-application-firewall, web-security, xss, captcha, api-gateway, appsec, cve, cybersecurity, hackers, vulnerability, websecurity, application-security, bruteforce, blueteam, self-hosted
Last push: 2026-08-26T06:19:48+00:00

## Health v2 (maintenance only)
Score: 96/100 (v2, computed 2026-09-02T17:46:02.011165+00:00)
- activity 99, release rhythm 98, longevity 88
- inputs: {"age_days": 1239, "days_push": 7, "days_rel": 16, "gap_med": 14.0, "n_releases_24m": 29}
- flags: none
- formula: round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10)

## Adoption (not part of the score)
Stars 22445, forks 1512 (observed 2026-08-28T04:11:32.620980+00:00)

## What it is
SafeLine is a self-hosted web application firewall (WAF) that acts as an Nginx-based reverse proxy to protect web apps from attacks like SQL injection, XSS, RCE, brute force, and HTTP flood. It uses an intelligent semantic analysis engine for threat detection and includes bot protection, CAPTCHA, and DDoS mitigation.

## Use cases
- protect my web app from sql injection and xss attacks
- self-hosted waf in front of my website
- block malicious bots and crawlers with captcha
- mitigate http flood ddos attacks
- reverse proxy with web security filtering
- prevent brute force login attempts
- shield a web server from zero-day exploits

## When to choose
- you need a self-hosted WAF protecting web applications behind a reverse proxy
- you want semantic/ML-based detection with low false positives rather than pure rule matching
- you need bot protection, rate limiting, and HTTP flood defense in one deployable unit

## When to avoid
- you need a host-based firewall or network-layer (non-HTTP) protection
- you cannot run Docker or a Linux-based proxy in front of your app
- you require a fully managed cloud WAF without self-hosting

## Facets
- artifact type: service
- maturity: active
- function: security, proxy, api-gateway, rate-limiting, http-server
- domain: security, web-development, self-hosted, backend
- platform: self-hosted
- tags: waf, web-application-firewall, reverse-proxy, sql-injection, xss, bot-protection, ddos-protection, captcha, nginx-based, linux, docker, web-server

## Member repositories
- chaitin/SafeLine (main) score 96

## Provenance
- Observed fields: from GitHub, fetched 2026-08-28T04:11:32.620980+00:00.
- Health v2: computed from the inputs above; adoption is never an input.
- Inferred fields (summary, facets, guidance): AI-extracted, prompt v1, taxonomy v1, on 2026-08-29T16:57:10.420757+00:00, confidence not recorded.
  - readme: https://github.com/chaitin/SafeLine (fetched 2026-08-28T04:11:32.620980+00:00, sha 7d5fba0cb543)
  - homepage: https://ly.safepoint.cloud/fUxS0GW (fetched 2026-08-29T07:55:35.992900+00:00, sha 94e80a55f767)
  - site_page: https://cyberserval.tech/about (fetched 2026-08-29T07:55:35.995748+00:00, sha 3ff1fe0f9c2d)
- Data as of 2026-08-30T08:39:29.467469+00:00.