edge-security

Privacy-first ear biometric segmentation - 99%+ accuracy with <2M parameters for edge authentication and GDPR compliance

Azazel System: Cyber Scapegoat Gateway doctrine and tool family for delaying action, deception, and edge defense.

AI-powered open-source edge security platform for Cloudflare, CDN, DNS, WAF and infrastructure automation.

🛡️ Zero-config hardware honeypot on a single ESP32-S3 — fake RTSP/HTTP/Telnet/SSH/FTP traps that capture attacker credentials, MAC/vendor & User-Agent, with Telegram alerts and a dark-mode dashboard. Pure ESP-IDF / C, no cloud, no Raspberry Pi.

V2 Enterprise Refactor: High-availability SaaS architecture for R2Upload. Features a decoupled Next.js edge and Laravel 12 API core. Engineered for Zero-Egress cloud economics utilizing Cloudflare R2 Vaults and Supervisord-managed Redis workers. Orchestrated via Kamal 2 for >99.9% uptime.

This extension provides a rich authoring experience for Azure Device OS Configuration documents.

Cloudflare Worker CDN with hotlink protection for public buckets (B2/S3). Image optimization, bot blocking, custom errors, anti-click wrapper

Traefik middleware plugin for IPGeolocation.io MMDB databases. Geo-blocking, VPN, proxy and Tor detection, and IP intelligence headers, resolved locally with no API calls.

A unified framework for strengthening CDN security and managing edge protection policies.

Scripts to sync local Crowdsec threat intelligence to Cloudflare firewall rules for edge protection

Harbor & Heath Outdoor Co. Cloudflare origin-readiness PoC. Source-grounded security with a week-one Cloudflare edge plan and a customer-ready engagement pack.

Zero-cloud smart-house IoT security ecosystem on 3x Raspberry Pi + 2x ESP32 (~$290). Lean detection, weighted risk governance, alert management. Phase 1 is notify-only - no cloud, no honeypots, no active scanners.

FlareStack is an automated traffic abuse mitigation system built on Cloudflare Workers. It periodically analyzes Cloudflare Analytics data to detect high-frequency or abusive IPs and automatically blocks them using WAF custom lists, helping protect sites from scraping, bots, and request floods.

Experimental gateway for verified-container operations. The only runnable gateway is a legacy Deno/TypeScript MVP; its AffineScript migration artifacts are incomplete and not production-ready.

Authenticated Fibonacci-Based Encryption for Edge Workloads

Hardened CrowdSec to Cloudflare IP List bouncer synchronizing LAPI decisions via REST API for edge WAF enforcement. Features zero external dependencies (pure Go), multi-target routing, and strict least-privilege sandboxing. Deployable via native APT/RPM repositories or non-root Docker Compose.

Board-ready Kinetic Gain surface for Cloudflare bot protection, WAF policy, and traffic-integrity posture.

An inline network Intrusion Detection and Prevention System (IDS/IPS) deployed as a gateway on Raspberry Pi / Orange Pi single-board computer running a reduced instruction set computing (RISC) Debian-based distribution using Suricata in NFQueue mode.

Cloud-neutral, zero-vendor-lock-in infrastructure platform built on CNCF standards, GitOps & edge security

Production Proxy-Wasm edge security filter for vmod-wasm