UUSEC WAF on Ubuntu 24.04 LTS

Overview

UUSEC WAF (uuWAF) is an open source, self hosted Web Application Firewall and reverse proxy that protects web applications from attacks and exploits. It combines several defence layers, a semantic analysis engine that understands SQL injection, cross site scripting, command injection and path traversal the way the target application would, machine learning anomaly detection, and runtime application self protection, so it recognises the intent behind an attack rather than relying only on signature lists, which keeps both evasion and false positives low.

UUSEC WAF sits in front of your sites as a reverse proxy: you add a protected site with its domain and upstream server, point the domain at the WAF, and every request is inspected before it reaches your application, with attacks answered by an interception page and the traffic marked with a uuWAF server header. It also brings a management console with traffic and attack dashboards, rule and rule set management, IP and geographic controls, TLS certificate handling with automatic Let's Encrypt issuance, and bot and CC attack defence. It suits teams who want to shield internal or public web applications behind a firewall they operate inside their own cloud account, rather than routing their traffic through a third party service.

Common uses

• Shield public or internal web applications from SQL injection, cross site scripting and other common exploits
• Run a self hosted, AI powered web application firewall and reverse proxy inside your own cloud account
• Add bot defence, CC attack protection and geographic IP controls in front of an existing site

See it running

Real screenshots taken while testing this image against its deployment guide.