wolfSSL/wolfsentry

Advanced Python-based Intrusion Detection System (IDS) featuring a real-time dashboard, GeoIP analysis, email alerts, and firewall integration for network threat monitoring and response.

NIPS — Machine-Learning-Based Network Intrusion Prevention System | Kitsune/LUCID integrated | Online unsupervised anomaly detection | Kernel-level real-time traffic interception | FastAPI + CLI management

Snort++

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine developed by the OISF and the Suricata community.

WireGuard Implementation for lwIP

Firegex, a firewall for Attack-Defense CTFs

ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx. It has a robust event-based programming language which provides protection from a range of attacks against web applications and allows for HTTP traffic monitoring, logging and real-time analysis.

🎯 A general-purpose protocol stack analysis and debugging tool based on eBPF 🧰

Lightweight eBPF/XDP stateful firewall that auto-syncs listening ports and preserves return traffic. Zero-config, maximum defense.