A machine learning security engine that preemptively prevents web app and API threats using supervised and unsupervised models.
open-appsec is an open-source machine learning security engine that preemptively protects web applications and APIs from threats like OWASP Top-10 attacks and zero-day exploits. It uses a dual-model approach, combining a globally trained supervised model with an unsupervised model that adapts to your specific environment, analyzing HTTP requests in real-time to block malicious traffic before it causes harm.
DevOps engineers, security teams, and developers deploying web applications or APIs in Linux, Docker, or Kubernetes environments who need proactive, adaptive threat protection without relying solely on traditional signature-based methods.
Developers choose open-appsec for its machine learning-driven approach that reduces false positives, prevents zero-day attacks, and integrates seamlessly with popular proxies and orchestration tools, offering a modern alternative to conventional web application firewalls.
open-appsec is a machine learning security engine that preemptively and automatically prevents threats against Web Application & APIs. This repo include the main code and logic.
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.
Combines a globally trained supervised model with an environment-specific unsupervised model to detect both known attacks and zero-day threats effectively.
Supports integration with NGINX, Kong, APISIX, or Envoy on Linux, Docker, or Kubernetes, offering versatile setup options for different infrastructures.
Decodes and analyzes all HTTP request parts, including JSON and XML, to apply security measures before requests reach the application.
Uses machine learning to preemptively block OWASP Top-10 and zero-day attacks, reducing reliance on signature updates.
The advanced ML model, crucial for production, must be downloaded separately from the open-appsec portal, creating an external dependency and potential update delays.
Installation involves multiple steps, dependencies, and integration with proxies, which can be cumbersome and time-consuming for new users.
Only compatible with specific proxies like NGINX, Kong, APISIX, and Envoy; unsupported web servers require workarounds or alternatives.