1. Project Overview

SafeLine - The Web Application Firewall That Keeps Hackers at Bay

SafeLine, also known as "LeiChi" in Chinese, is an easy-to-use and highly effective Web Application Firewall (WAF) that protects Web services from hacker attacks.

SafeLine protects Web services by filtering and monitoring HTTP traffic between Web applications and the internet. It safeguards Web services against SQL injection, XSS, code injection, command injection, CRLF injection, LDAP injection, XPath injection, RCE, XXE, SSRF, path traversal, backdoor attacks, brute-force attacks, CC attacks, web scraping, and other threats.

2. Open Source License

Licensed under GPL-3.0

3. Screenshots

Project screenshots

Core Capabilities

Legitimate User	Malicious User
Block Web Attacks
Limit Access Frequency
Human Verification
Identity Authentication
Dynamic HTML Protection
Dynamic JS Protection

4. Feature Overview

Highly effective Web Application Firewall (WAF) that protects Web services from hacker attacks.

SafeLine protects Web services by filtering and monitoring HTTP traffic between Web applications and the internet. It safeguards Web services against SQL injection, XSS, code injection, command injection, CRLF injection, LDAP injection, XPath injection, RCE, XXE, SSRF, path traversal, backdoor attacks, brute-force attacks, CC attacks, web scraping, and other threats.

 How It Works

SafeLine protects Web services by blocking malicious HTTP traffic directed at them. SafeLine operates as a reverse proxy within your network. By deploying SafeLine in front of your Web services, you can establish a security barrier between your Web services and the internet.

SafeLine's core features include:

• Web Attack Protection

• Anti-Scraping and Anti-Scanning

• Dynamic Encryption of Frontend Code

• Source IP-Based Access Rate Limiting

• HTTP Access Control

5. Tech Stack

Environment Dependencies

Before installing SafeLine, ensure that your system environment meets the following requirements:

• Operating System: Linux

• CPU Instruction Architecture: x86_64

• CPU instruction architecture: Supports the SSSE3 instruction set

• Software dependency: Docker version 20.10.14 or later

• Software dependency: Docker Compose version 2.0.0 or later

• Minimum resource requirements: 1 CPU core / 1 GB RAM / 5 GB disk space

More Information

Protection Effectiveness Test

Metric	ModSecurity, Level 1	CloudFlare	Leichi, Balance	Leichi, Strict
Number of Samples	33669	33669	33669	33669
Detection Rate	69.74%	10.70%	71.65%	76.17%
False Positive Rate	17.58%	0.07%	0.07%	0.22%
Accuracy Rate	82.20%	98.40%	99.45%	99.38%

Can Leichi Be Used in Production?

Yes, many users have already deployed Leichi in production environments. As of now,

• The total number of installations worldwide has exceeded 180,000

• The number of protected websites has exceeded 1 million

• More than 30 billion HTTP requests are cleaned daily