samwafgo/SamWaf

Health v2 · maintenance only

Adoption not part of the score

1547 stars · 189 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

SamWaf is a lightweight, open-source web application firewall (WAF) written in Go, designed for small companies, studios, and personal websites. It supports fully private deployment on Linux and Windows 64-bit, encrypts local data, and provides protection features like SQL injection detection, XSS detection, bot detection, CC protection, and custom rules without depending on third-party services.

Use cases

• protect my personal website from sql injection and xss attacks
• self-host a lightweight waf for a small company website
• block malicious bots and crawlers from my site
• rate-limit and ban IPs doing too many requests (CC protection)
• reverse proxy my web app with ssl and firewall protection
• deploy a private waf without sending data to the cloud
• add ip blacklist/whitelist rules to my website
• detect and block web scanners and rce attempts

When to choose

• you need a fully private, self-hosted WAF for a small site or studio
• you want a lightweight standalone engine that doesn't require nginx/IIS plugins
• you need local data encryption and privacy (no cloud dependency)
• you run Linux or Windows 64-bit and want easy one-click deployment
• you want built-in OWASP rule sets, bot detection, and CC protection out of the box

When to avoid

• you need enterprise-scale WAF with advanced ML-based threat detection
• you require cloud-managed WAF with global threat intelligence
• you need deep integration with a specific cloud provider's security stack
• you need a hardware firewall or network-layer (L3/L4) protection appliance

Facets

application · maturity active

security proxy http-server monitoring alerting caching load-testing security web-development self-hosted backend networking windows self-hosted go waf web-application-firewall reverse-proxy sql-injection-detection xss-protection bot-detection rate-limiting ssl-management threat-intelligence reverse-engineering-protection linux docker

Member repositories

For agents

markdown · JSON · MCP: product_card(name="samwafgo/SamWaf")