Skip to content
appsgit

UUSEC WAF

UUSEC WAF is an open-source, self-hosted app in the Web Servers & Reverse Proxies category, licensed BSD-2-Clause and written mainly in Shell. It ships a Docker image. It has 1,717 GitHub stars and its last commit was on Oct 20, 2026 (data as of Oct 26, 2026).

github.com/Safe3/uusec-waf

GitHub stats

GitHub stars
1,717
Forks
169
Open issues
83
Commits, last 12 months
93
Last commit
Oct 20, 2026
Latest release
v7.2.6Oct 12, 2026
Created
Sep 18, 2022
License
BSD-2-ClauseOpen source

Data as of from the GitHub API. Report an error

Project health

ActiveActive: last commit Oct 20, 2026, 93 commits in 12 months.

Raw inputs behind the health label
Last commitOct 20, 2026
Commits, last 12 months93
Latest releasev7.2.6 (Oct 12, 2026)
Releases, last 12 months8
Releases, all time36
Open issues83
Open pull requests1
Good first issues0
Contributing guideNo
Security policyNo
CreatedSep 18, 2022

Health as of , from the GitHub API. A label describes activity, not quality or security. How we label project health · Report a data error

About UUSEC WAF

Industry-leading high-performance, AI and semantic technology web application firewall and API security gateway (fork of nginx).

Description adapted from awesome-selfhosted (CC BY-SA 3.0). Source code: github.com/Safe3/uusec-waf.

Topics

  • waf
  • application-security
  • web-application-firewall
  • modsecurity
  • web-security-gateway
  • api-gateway
  • api-security
  • waap
  • security
  • ddos

Repository preview

UUSEC WAF repository previewSafe3/uusec-wafOpen repository

FAQ

UUSEC WAF FAQ

Still curious? Email info@appsgit.com.

Is UUSEC WAF free and open source?

Yes. UUSEC WAF is open-source software released under the BSD-2-Clause license, so you can self-host it at no cost. You only pay for the server it runs on, and some projects also offer an optional paid cloud plan.

Can I run UUSEC WAF with Docker?

Yes. UUSEC WAF provides a Docker image, so you can run it on any Linux server with Docker and Docker Compose installed. The project README lists the image name and the environment variables to set.

What are the best alternatives to UUSEC WAF?

Popular self-hosted alternatives to UUSEC WAF include Caddy, Traefik and Nginx Proxy Manager.

Is UUSEC WAF actively maintained?

The most recent commit to UUSEC WAF was on Oct 20, 2026 with 93 commits in the past twelve months. The latest release is v7.2.6, published Oct 12, 2026. It had 83 open issues on GitHub. appsgit's project-health label for it is "Active" as of Oct 26, 2026.