# aaWAF

> Comprehensive and user friendly open source web application firewall

- Canonical URL: https://www.fosshunter.com/tools/aawaf
- JSON export: https://www.fosshunter.com/tools/aawaf.json
- Website: https://github.com/aaPanel/aaWAF/
- Category: Web Application Firewall
- Open source: yes
- Self-hostable: yes
- Verified listing: no
- Featured: no
- Published at: 2026-04-02T10:09:40+00:00
- Catalog revision: `1053397304`

## Repository metrics (point-in-time)

- Repository: https://github.com/aaPanel/aaWAF/
- Stars: 749
- Forks: 140
- Open issues: 42
- License: AGPL-3.0
- Last push: 2026-06-03T07:33:08+00:00
- Metrics observed at (synced_at): 2026-11-04T02:34:41+00:00
- Archived: no

Tags: Firewall, WebSecurity, http-flood, WAF
Tech stacks: docker, go, golang, javascript, php

## Features
- Web Attack Protection - Blocks SQL injection, XSS, and common vulnerabilities to keep websites secure. *(highlighted)*
- CC Attack Mitigation - Automatically identifies and filters high frequency HTTP flood attacks to maintain uptime. *(highlighted)*
- Real Time Monitoring - Offers a visual dashboard for tracking traffic patterns and security events instantly. *(highlighted)*

## Description

aaWAF provides robust security for web applications by blocking common attacks and offering real time monitoring. It simplifies server protection with an intuitive interface and automated defense mechanisms.

---
Source: [FOSSHunter — aaWAF](https://www.fosshunter.com/tools/aawaf) — cite `synced_at` and the catalog revision when quoting metrics.
Interpretation rules: https://www.fosshunter.com/llms-full.txt