Open-source alternatives to Cloudflare WAF

Cloudflare WAF in the IT, security & identity category. These are the open alternatives we recommend looking at.

Self-hosted web application firewall (WAF) acting as a reverse proxy against attacks.

GPL-3.0Strong copyleft

SaaS: YesClosed product: No

Detects and blocks attacks and bots using logs and a shared list of malicious IP addresses.

MITPermissive

SaaS: YesClosed product: Yes

This is guidance, not legal advice (inte juridisk rådgivning). Check with a lawyer before deciding.

Sign in for more

Full licence analysis per use case (self-hosting, modifying, hosted service, AI use)
Save products to your own lists
Systemkarta: map the tools you already use (coming soon)
Personal help and AI advice (coming soon)