SafeLine WAF on Ubuntu 24.04

Overview

SafeLine is an open source, self hosted Web Application Firewall and reverse proxy that protects web applications from attacks and exploits. Instead of matching requests against long lists of regular expression signatures, it uses a semantic analysis engine that parses each request the way the target application would, so it recognises the intent behind SQL injection, cross site scripting, command injection, path traversal and other common web attacks while letting legitimate traffic through, which keeps both evasion and false positives low.

SafeLine sits in front of your sites as a reverse proxy: you point a protected site at your upstream server and choose the port it listens on, and every request is inspected by the detection engine before it reaches your application, with attacks answered by an interception page. It also brings a management console with traffic and event dashboards, rate limiting, an authentication challenge for anonymous visitors and bot and automation defence. It suits teams who want to shield internal or public web applications behind a firewall they operate inside their own cloud account, rather than routing their traffic through a third party service.

Common uses

• Shield public or internal web applications from SQL injection, cross site scripting and other common exploits
• Run a self hosted web application firewall and reverse proxy inside your own cloud account
• Add rate limiting, bot defence and an authentication challenge in front of an existing site

See it running

Real screenshots taken while testing this image against its deployment guide.