Safe3/uusec-waf

Health v2 · maintenance only

Adoption not part of the score

1703 stars · 170 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

UUSEC WAF is a free, high-performance web application firewall and API security gateway (WAAP) that combines AI/semantic detection engines with traditional rule-based protection. It provides three-layer defense across traffic, system (HIPS), and application runtime (RASP) layers, with features like machine-learning-based 0-day defense and CDN cache purging.

Use cases

• protect websites from sql injection and xss attacks
• block zero-day exploits without updating rules
• secure and rate-limit apis behind a gateway
• self-host a web application firewall in front of nginx services
• prevent ddos and bot traffic
• automatically provision https certificates with letsencrypt
• add runtime application self-protection to block server-side attacks

When to choose

• you need a free self-hosted WAF with AI and semantic detection
• you want layered defense including HIPS and RASP beyond traffic filtering
• you run nginx-based sites and want integrated CDN cache purging and API protection

When to avoid

• you need a managed cloud WAF with vendor support and SLAs
• your stack is Windows-only since it targets Linux deployments
• you only need simple rate limiting without full WAF complexity

Facets

service · maturity active

security api-gateway rate-limiting reverse-engineering monitoring security web-development apis self-hosted self-hosted waf web-application-firewall api-security waap rasp hips ddos-protection sql-injection xss owasp letsencrypt nginx reverse-proxy machine-learning linux docker web-server

Member repositories

For agents

markdown · JSON · MCP: product_card(name="Safe3/uusec-waf")