api-protection

High-performance distributed rate limiter service with Redis backend. Supports token bucket and sliding window algorithms, dynamic configuration, and real-time metrics. Built for microservices architectures.

High-performance GCRA rate limiter. Multi-protocol server (HTTP, gRPC, Redis/RESP) with advanced metrics, or embed as a minimal Rust library. Self-tuning memory management 🦀

The ultimate composable middleware engine for Angular. Protect routes & HTTP requests with 30+ built-in security guards for Auth, RBAC, CSRF, Rate Limiting, & Zero Trust.

UZYNTRA API Firewall is a high-performance API security engine that inspects, detects, and mitigates threats in real time through a programmable reverse proxy architecture.

[OLD VERSION] Ultimate enterprise‑grade, AI & WASM‑powered Express security framework.

Intent-aware runtime governance and enforcement for autonomous AI agents interacting with APIs, tools, and MCP servers.

Code of the automated deployment demo shown at the SEG360 event, on the talk "APIs sous pression : sécuriser sans s’exposer grâce à l’APIM"

Your API learns to defend itself. Behavioral pattern caching for Supa base. Brain silent after learning. Cost: $0.

Monitoring software to detect and to block data leaks in your APIs

nestjs🚦 Production-ready rate limiting microservice with Redis, IP banning, real-time monitoring & admin dashboard. Protect APIs from abuse. Node.js + TypeScript + Docker. LIVE on Render

C# Middleware to capture HTTP requests and responses in your APIs

limitron is a Go library providing flexible and efficient rate limiting algorithms with support for multiple storage backends (in-memory and Redis). It offers easy-to-use factories, a unified Limiter interface, and constants for robust configuration. Suitable for API protection, service throttling, or any scenario requiring access control based

Self-hosted, zero-dependency adaptive API protection: rotating token + risk-tiered proof-of-work + environment-binding + polymorphic VM sensor. MIT.

A TypeScript middleware library for intelligent API rate limiting with adaptive thresholds

Spring Boot API with distributed IP-based rate limiting implemented using Bucket4j and Redis (Lettuce), backed by PostgreSQL and Flyway.

Hands-on FortiWeb WAF security lab in EVE-NG, documenting a single-VIP reverse-proxy environment with web/API protection, bot mitigation, application delivery, DoS controls, logging, and vulnerability scanning.

🔒 Autonomous Zero Trust Security Agent for Cloudflare Workers - AI-powered API protection with Shadow AI detection, deception honeypots, and real-time threat analysis.

Production-grade rate limiter with in-memory + Redis support, subscription tiers, and auto-cleanup. Zero dependencies.

Distributed rate limiting for Node.js and Express. Redis-backed with atomic Lua scripts, four algorithms (fixed window, sliding log, sliding window counter, GCRA), an in-memory store with the same semantics, and fail-open or fail-closed handling. TypeScript, ESM and CJS.

A client-agnostic, multi-stage rate limiting policy engine for TypeScript, powered by @upstash/ratelimit.