E2guardian, an open source web content filtering proxy, governing and logging every outbound request from the moment it boots.
E2guardian is a web content filtering proxy that sits between users and the internet and applies policy to every request. It filters by domain, URL, file extension, MIME type and weighted phrase content, and returns a clear block page when a request is refused rather than failing silently. It runs standalone, connecting directly to origin sites, or chains to an existing proxy if one is already deployed. Every transaction is written to a structured access log, so outbound browsing is both governed and auditable, which is why it is widely used in schools, managed networks and regulated environments.
An exposed filtering proxy is an open relay waiting to be abused, so cloudimg ships a fail closed access control: the proxy port accepts loopback and private client networks only, all other sources are dropped, and the proxy refuses to start if that allowlist cannot be applied. The image performs no TLS interception, so no certificate authority private key exists in it or on your machine. There is no product login and no bootstrap password, administration is over your own key based SSH, and the corresponding source and licence ship on the image. A paired deployment guide and 24/7 cloudimg support are included.