edge-security

Privacy-first ear biometric segmentation - 99%+ accuracy with <2M parameters for edge authentication and GDPR compliance

Azazel System: Cyber Scapegoat Gateway doctrine and tool family for delaying action, deception, and edge defense.

AI-powered open-source edge security platform for Cloudflare, CDN, DNS, WAF and infrastructure automation.

V2 Enterprise Refactor: High-availability SaaS architecture for R2Upload. Features a decoupled Next.js edge and Laravel 12 API core. Engineered for Zero-Egress cloud economics utilizing Cloudflare R2 Vaults and Supervisord-managed Redis workers. Orchestrated via Kamal 2 for >99.9% uptime.

This extension provides a rich authoring experience for Azure Device OS Configuration documents.

🛡️ Zero-config hardware honeypot on a single ESP32-S3 — fake RTSP/HTTP/Telnet/SSH/FTP traps that capture attacker credentials, MAC/vendor & User-Agent, with Telegram alerts and a dark-mode dashboard. Pure ESP-IDF / C, no cloud, no Raspberry Pi.

Cloudflare Worker CDN with hotlink protection for public buckets (B2/S3). Image optimization, bot blocking, custom errors, anti-click wrapper

A unified framework for strengthening CDN security and managing edge protection policies.

Scripts to sync local Crowdsec threat intelligence to Cloudflare firewall rules for edge protection

FlareStack is an automated traffic abuse mitigation system built on Cloudflare Workers. It periodically analyzes Cloudflare Analytics data to detect high-frequency or abusive IPs and automatically blocks them using WAF custom lists, helping protect sites from scraping, bots, and request floods.

An inline network Intrusion Detection and Prevention System (IDS/IPS) deployed as a gateway on Raspberry Pi / Orange Pi single-board computer running a reduced instruction set computing (RISC) Debian-based distribution using Suricata in NFQueue mode.

Proxy-Wasm HMAC request signature verifier for Varnish and vmod-wasm

Board-ready Kinetic Gain surface for Cloudflare bot protection, WAF policy, and traffic-integrity posture.

Engineering-to-Research Monograph Series (Zenodo community). Companion code (Python, C++, embedded C) MIT, github.com/AlanP13. Grounded in author coursework (IIT ECE 543/545, ECE 442); written from scratch for publication.

Production-ready Caddy WAF with Coraza + OWASP CRS, automatic TLS, and Docker-first hardening. No vendor lock-in.

HUMAN Security (formerly PerimeterX) is an application security company focused on stopping automated abuse: sophisticated bots, account takeover, fake account creation, scraping, ad fraud, client-side supply-chain attacks, and transaction fraud.

Production Proxy-Wasm edge security filter for vmod-wasm

DataDome is a real-time bot and online fraud protection platform that inspects every web, mobile, and API request and decides — within milliseconds — whether it should be allowed, challenged, or blocked.

Cloudflare Turnstile is Cloudflare's free, smart CAPTCHA alternative that verifies real users without sending traffic through Cloudflare's network. It runs non-interactive client-side challenges (proof-of-work, proof-of-space, web API probing, browser-integrity checks) and returns a short-lived token that the relying server validates against the…

AWS WAF is a web application firewall that monitors and controls HTTP and HTTPS requests forwarded to protected resources such as Amazon CloudFront distributions, API Gateway REST APIs, Application Load Balancers, AWS AppSync GraphQL APIs, Cognito user pools, App Runner services, Amplify applications, and Verified Access instances.