16-Phase Request Pipeline
Full request lifecycle processing from connection to logging, with early exit on block.
OpenPRX
PRX-WAF
High-performance Web Application Firewall
Production-grade WAF built on Cloudflare's Pingora proxy framework.
Language: Rust License: Apache-2.0 
Key Features
644+ Built-in Rules
OWASP CRS, custom YAML rules, ModSecurity compatibility, and JSON rule format.
GeoIP with ip2region
Country and region-level blocking and rate limiting with offline ip2region database.
Bot Detection
User-agent analysis, behavioral scoring, and crawler classification.
Advanced Rate Limiting
Per-IP, per-route, and per-API-key rate limiting with sliding window counters.
API Security
JSON body inspection, parameter validation, and API-specific rule profiles.
Architecture
Client
→ Pingora Proxy
→ Backend Server
↕ WAF Engine (644+ Rules)
OWASP CRS | GeoIP | Bot | Rate Limit | API
Tech Stack
Rust, Pingora, PostgreSQL, Vue 3
Quick Start
git clone https://github.com/openprx/prx-waf.git
cd prx-waf
docker compose up -dAlso from OpenPRX
OpenPR
Open-source project management with built-in governance
Team work management with issues, boards, sprints, and governance workflows.
Governance Kanban MCP Server SvelteKit
Learn More PRX
Self-evolving AI assistant framework
Rust-native assistant runtime with multi-provider inference and governed sub-agents.
14 Providers 19 Channels Self-Evolution OAuth
Learn More prx-memory
Local-first MCP memory for coding agents
Durable memory toolchain for storing, recalling, and governing agent knowledge.
MCP Native Local-First Evolution Codex/Claude
Learn More PRX-SD
Open-source antivirus engine
Multi-layered threat detection with hash matching, YARA rules, and heuristic analysis.
Hash Matching YARA Rules Heuristic Analysis Real-time Monitor
Learn More Fenfa
Self-hosted app distribution platform
Deploy once, distribute to iOS, Android, macOS, Windows, and Linux.
Multi-Platform Self-Hosted OTA Updates REST API
Learn More