Web Application Firewall | SafePoint
A simple, lightweight, self-hosted wAF that protects your website from cyber attacks.
Categories:
SafeLine is a self-hosted, open-source Web Application Firewall (WAF) that protects web applications from cyber threats using intelligent semantic analysis and reverse proxy capabilities.
🚀 Overview
SafeLine WAF, developed by Chaitin Tech (Beijing Chaitin), is a lightweight, high-performance reverse proxy and WAF that filters malicious HTTP traffic, blocking attacks like SQL injection, XSS, RCE, SSRF, bots, and DDoS floods before they reach your web apps.
It solves the critical problem of web vulnerabilities exposing websites to exploits, providing enterprise-grade protection with a 99.995% detection rate and 0.007% false positives through ML-powered semantic analysis—without the complexity or cost of traditional WAFs.
Built for developers, indie makers, SaaS teams, e-commerce platforms, and content services who need easy-to-deploy security for self-hosted or cloud apps.
Chaitin built it to make advanced cybersecurity accessible, open-sourcing the core for community innovation (20.9k GitHub stars) while offering pro upgrades for enterprises.
✨ Key Features
- Intelligent Web Threat Detection: ML-driven semantic engine parses HTTP traffic to block SQLi, XSS, RCE, zero-days, and more with high precision.
- Bot Protection: Multi-layer defenses including CAPTCHA, dynamic rules, and anti-replay to stop malicious crawlers and abuse.
- HTTP Flood DDoS Protection: Intelligent rate limiting, traffic orchestration, and access controls to maintain availability under attack.
- Identity & Access Management: Unified auth, ACLs, geo-blocking, and custom interception pages.
- Optional: Advanced stats, load balancing, master-slave sync, notifications (Pro/Ultimate plans).
🛠 Tech Stack
- Frontend: Web dashboard (HTML, JavaScript, Lua scripts)
- Backend: Nginx reverse proxy, Go (core logic), C++ (performance modules), Python, Lua, Raku
- Database: File-based or embedded (no external DB required)
- Auth: Custom built-in (password auth, challenges)
- Hosting: Self-hosted (Docker Compose, one-click binary install)
👥 Who Is This For?
This project is useful for:
- Developers who want to secure self-hosted web apps with minimal setup
- Teams looking for affordable, open-source alternatives to cloud WAFs
- Indie makers building SaaS, e-commerce, or media sites needing bot/DDoS defense
📸 Screenshots / Demo
- Live demo: https://demo.waf.chaitin.com:9443/
- GitHub: https://github.com/chaitin/safeline
🔥 Project Status
- 🟢 Actively building
Last updated: 2026-03-24
❓ FAQ
Is this project free?
Freemium / Open Source (Core Personal plan free forever with essential features; paid Lite/Pro/Ultimate for advanced configs, support, unlimited apps: $10-$100+/mo.)
Is the source code available?
Yes — https://github.com/chaitin/safeline
Can I contribute?
Yes—report bugs or suggest features via GitHub issues/PRs, join Discord discussions, or test betas. 22 contributors so far; GPL-3.0 license.
📬 Contact & Links
- Website: https://waf.chaitin.com
- GitHub: https://github.com/chaitin/safeline
- Discord: https://discord.gg/dy3JT7dkmY
- Docs: https://docs.waf.chaitin.com/
Built with ❤️ and kept warm on WarmIndex.
Similar apps
Home | Pelican
pelican.dev
Caww-Kaww
WebTorrent - Streaming browser torrent client
webtorrent.io
WebTorrent, the streaming torrent client for the browser, Mac, Windows, and Linux
Prisma | Instant Postgres plus an ORM for simpler db workflows
prisma.io
Build, fortify, and grow your application easily with an intuitive data model, type-safety, automated migrations, connection pooling and caching.
Open-Source Static CMS for Fast, Secure, GDPR & CCPA-Compliant Websites
getpublii.com
Free, open-source desktop CMS for creating fast, secure static websites. Works offline, WordPress-like simplicity, one-click deployment. GDPR & CCPA compliant.