A Web Application Firewall that Thinks, Remembers, and Visualizes.
Biubo WAF is not just another rule-based filter. It is an Intelligence-First Proxy that bridges the gap between high-speed security and modern AI intuition. It sits as a guardian in front of your applications, watching every request through a dual lens of Regex Performance and LLM Awareness.
Tip
Zero-Zero Setup: No SQL, No Redis, No complex Nginx configs. Just Python and the power of AI.
Biubo WAF monitors every packet. From complex obfuscated payloads to sudden anomalies, watch it neutralize threats in milliseconds before they even reach your server.
Attack detected and IP instantly isolated using high-speed signature and semantic correlation.
Stop guessing. Watch exactly what the attacker did on your site with our integrated rrweb session playback.
Stay ahead of the threat. Visualize every incoming attack on a live global map, providing instant situational awareness.
| Feature | Description | Status |
|---|---|---|
| Dual-Path Detection | Regex (Fast Path) + LLM (Deep Path) for maximum coverage. | ✅ |
| Visual Session Replay | Integrated rrweb to record and playback malicious sessions. |
✅ |
| JS Challenge | Client-side Challenge-Response to stop headless bots. | ✅ |
| Self-Contained DB | Lightning-fast Msgpack storage with write-behind flushing. | ✅ |
| Dynamic Dashboard | Modern, responsive console for real-time traffic monitoring. | ✅ |
graph LR
A[Client Traffic] --> B[Biubo Gateway]
subgraph Engine
B --> C{Regex Match?}
C -- No --> D{LLM Opinion?}
D -- Hacker --> E[BLOCK]
C -- Yes --> E
D -- Normal --> F[PASS]
end
F --> G[Your Backend]
E --> H[Visual Log + rrweb]
# Clone the repository
git clone https://github.com/BiuboWAF/Biubo.git
cd Biubo
# Run the interactive setup
python setup.py
# Start protecting
python main.pydocker run zplb/biubo:1.1.0- Developer Guide - How the engine works internally.
- Roadmap - Our vision for P1/P2/P3.
- Contributing - We need your code and ideas!
Biubo WAF is open-source software licensed under the MIT License.
Built with ❤️ for a more secure, intelligent web.