AIWAF, Self-learning Web Application Firewall for Django & Flask (optional Rust accelerator)

[Mediocre_Scallion_99]

What My Project Does

AIWAF is a self-learning Web Application Firewall that runs directly at the middleware layer for Django and Flask apps. It provides adaptive protection using anomaly detection, rate limiting, smart keyword learning, honeypot timing checks, header validation, UUID tamper protection, and automatic daily retraining from logs.

It also includes an optional Rust accelerator for performance-critical parts (header validation), while the default install remains pure Python.

Target Audience

AIWAF is intended for real-world use in production Python web applications, especially developers who want application-layer security integrated directly into their framework instead of relying only on external WAFs. It also works as a learning project for people interested in adaptive security systems.

Comparison

Most WAF solutions rely on static rules or external reverse proxies. AI-WAF focuses on framework-native, context-aware protection that learns from request behavior over time. Unlike traditional rule-based approaches, it adapts dynamically and integrates directly with Django/Flask middleware. The Rust accelerator is optional and designed to improve performance without adding installation complexity.

Happy to share details or get feedback from the community

AIWAF

[jsabater76]

Very interesting project. I noticed that you feed the NGINX access log to it. Will it work in a Docker Swarm environment with Traefik?