NAXSI
An open-source, high-performance Web Application Firewall (WAF) module for NGINX that blocks malicious web traffic by default.
What is NAXSI?
NAXSI is an open-source Web Application Firewall (WAF) module for NGINX that protects web applications from common attacks like SQL injection and cross-site scripting (XSS). It operates on a default-deny principle, blocking all traffic unless explicitly whitelisted, and uses a minimal set of rules to detect malicious patterns. The project solves the need for a high-performance, low-maintenance WAF that doesn't rely on signature databases.
System administrators, DevOps engineers, and security professionals managing NGINX web servers who need a lightweight, effective WAF to secure web applications against common vulnerabilities.
Developers choose NAXSI for its simplicity, performance, and security-by-default approach, which avoids the pitfalls of signature-based WAFs and reduces rule maintenance. Its open-source nature and compatibility with various UNIX-like platforms make it a flexible and cost-effective alternative to commercial WAF solutions.
Overview
NAXSI is an open-source, high performance, low rules maintenance WAF for NGINX
Use Cases
Best For
- Securing NGINX web servers against SQL injection and XSS attacks
Related Projects
Found a gem we're missing?
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.
