SafeLine
SafeLine is a self-hosted WAF(Web Application Firewall) / reverse proxy to protect your web apps from attacks and exploits.
⭐ 22,938 stars on GitHub · 🍴 1,571 forks · 📜 License: gpl-3.0 · 💻 Language: Go
What is SafeLine?
A standout opensource self-host project on GitHub — host on your own server for full control over your data and costs.
Main components
- Block Web Attacks
- It defenses for all of web attacks, such as SQL injection, XSS, code injection, os command injection, CRLF injection, XXE, SSRF, path traversal and so on.
- Rate Limiting
- Defend your web apps against DoS attacks, bruteforce attempts, traffic surges, and other types of abuse by throttling traffic that exceeds defined limits.
- Anti-Bot Challenge
- Anti-Bot challenges to protect your website from bot attacks, human users will be allowed, crawlers and bots will be blocked.
- Authentication Challenge
- When authentication challenge turned on, visitors need to enter the password, otherwise they will be blocked.
The biggest strength is active opensource community — fast bug fixes, regular features, no abandonment risk.
Best for self-host enthusiasts wanting to try a strong-community opensource project.
Topics: the project is tagged with popular topics:
- 🏷️
api-gateway - 🏷️
application-security - 🏷️
appsec - 🏷️
blueteam - 🏷️
bruteforce - 🏷️
captcha - 🏷️
cve - 🏷️
cybersecurity - 🏷️
firewall - 🏷️
hackers
📸 Screenshots

Quick install
The project supports Docker Compose:
git clone https://github.com/chaitin/SafeLine.git
cd SafeLine
docker compose up -d
Check the README in the repo for required env variables.
Minimum system requirements
| Component | Recommended |
|---|---|
| RAM | 2048 MB |
| CPU | 2 vCPU |
| Disk | 25 GB SSD |
| OS | Ubuntu 22.04 LTS / Debian 12 |
| Docker | 24.0+ |
⚡ Deploy fast on VSIS
Use the VSIS VPS Lite 2GB RAM / 2 vCPU / 25GB SSD (~104k/tháng) plan from VSIS.NET — high-speed VN-based VPS, 24/7 support, ideal for running SafeLine smoothly.
🎯 Benefits:
- One-command
docker compose up -ddeploy in 2 minutes - Dedicated IPv4, root access, unmetered domestic bandwidth
- Daily snapshot backup
- Free install assistance from the VSIS team
👉 See matching VPS plans at vsis.net
Resources
- 🔗 GitHub: chaitin/SafeLine
- 🌐 Homepage: https://ly.cyberserval.tech/d4HFBvC
- 📚 Official docs: see README in the repo
- 💬 Community: GitHub Issues + Discussions
Article compiled from GitHub data on 24/10/2026. Star/fork counts may have changed — see live numbers via the GitHub link.
