# SafeLine

> SafeLine is a free, open-source app you can self-host in the web servers & reverse proxies category. Web application firewall / reverse proxy to protect your web apps from attacks and exploits. It has 22,706 GitHub stars, is released under the GPL-3.0 license and ships a Docker image.

## Key facts

| Fact | Value |
|---|---|
| Repository | https://github.com/chaitin/SafeLine |
| Website | https://waf.chaitin.com/ |
| Demo | https://demo.waf.chaitin.com/ |
| GitHub stars | 22,706 |
| Forks | 1,546 |
| Open issues | 71 |
| License | GPL-3.0 |
| License type | Open source |
| Language | Go |
| Docker image | Yes |
| Platforms | Docker |
| Categories | Web Servers & Reverse Proxies |
| Commits, last 12 months | 43 |
| Last commit | Sep 28, 2026 |
| Latest release | v9.4.2 (Sep 28, 2026) |
| Created | Apr 12, 2023 |
| Maintenance | Actively maintained |
| Archived | No |

Topics: firewall, http-flood, security, sql-injection, waf, web-application-firewall, web-security, xss, captcha, api-gateway

## Install

SafeLine ships a Docker image; follow the README at https://github.com/chaitin/SafeLine for the image name and environment variables.

Need it installed for you? [appsgit installation help](https://appsgit.com/services/install): a fixed quote by email, single app installs from $79.

## Similar apps in Web Servers & Reverse Proxies

- [Caddy](https://appsgit.com/apps/caddy): Powerful, enterprise-ready, open source web server with automatic HTTPS. (77,243 stars, Apache-2.0, Go, Docker)
- [Traefik](https://appsgit.com/apps/traefik): HTTP reverse proxy and load balancer that makes deploying microservices easy. (65,081 stars, MIT, Go, Docker)
- [Nginx Proxy Manager](https://appsgit.com/apps/nginx-proxy-manager): Docker container for managing Nginx proxy hosts with a simple, powerful interface. (34,325 stars, MIT, TypeScript, Docker)
- [NGINX](https://appsgit.com/apps/nginx): HTTP and reverse proxy server, mail proxy server, and generic TCP/UDP proxy server. (31,800 stars, BSD-2-Clause, C, Docker)
- [Pangolin](https://appsgit.com/apps/pangolin): Identity-aware tunneled reverse proxy with dashboard UI, access control, and WireGuard-based tunnels (alternative to Cloudflare Tunnel, Tailscale). (23,015 stars, AGPL-3.0, TypeScript, Docker)
- [BunkerWeb](https://appsgit.com/apps/bunkerweb): Next-gen Web Application Firewall (WAF) that will protect your web services. (11,043 stars, AGPL-3.0, Python, Docker)
- [Zoraxy](https://appsgit.com/apps/zoraxy): General purpose HTTP reverse proxy and forwarding tool. (5,510 stars, AGPL-3.0, HTML, Docker)
- [Pomerium](https://appsgit.com/apps/pomerium): Identity-aware reverse proxy, successor to now obsolete oauth_proxy. It inserts an OAuth step before proxying your request to the backend, so that you can safely expose your self-hosted websites to… (5,026 stars, Apache-2.0, Go, Docker)

---

Canonical page: https://appsgit.com/apps/safeline
Source: appsgit (https://appsgit.com), the app store for github. Data from the GitHub API, refreshed nightly.
Machine access: JSON API https://appsgit.com/api/v1/apps (OpenAPI: https://appsgit.com/openapi.json), MCP server https://mcp.appsgit.com/mcp, full index https://appsgit.com/llms-full.txt.