Open Source Alternatives to Cloudflare

A web application firewall that inspects HTTP/S requests at the network edge to identify and block malicious payloads. The product uses managed and custom rules to protect web applications and APIs from common exploits, such as SQL injection and cross site scripting, as well as zero day vulnerabilities. It provides virtual patching for CVEs and an inline malware gateway for scanning file uploads. The service is deployed across a global network to minimize latency and is managed via API for integration into CI/CD workflows. It is designed for developers and businesses seeking to secure their applications without managing complex rulesets manually.

Whether you want to cut software costs or escape vendor lock-in, these open source alternatives to Cloudflare give you an option you fully own. You can self-host them, so your data stays on infrastructure you control. This page lists 3 open source alternatives to Cloudflare. The most popular are SafeLine, BunkerWeb and UUSEC WAF. Most use the AGPL-3.0 or BSD-2-Clause license, and 3 offer an official Docker image.