edge-security

Privacy-first ear biometric segmentation - 99%+ accuracy with <2M parameters for edge authentication and GDPR compliance

Azazel System: Cyber Scapegoat Gateway doctrine and tool family for delaying action, deception, and edge defense.

AI-powered open-source edge security platform for Cloudflare, CDN, DNS, WAF and infrastructure automation.

🛡️ Zero-config hardware honeypot on a single ESP32-S3 — fake RTSP/HTTP/Telnet/SSH/FTP traps that capture attacker credentials, MAC/vendor & User-Agent, with Telegram alerts and a dark-mode dashboard. Pure ESP-IDF / C, no cloud, no Raspberry Pi.

V2 Enterprise Refactor: High-availability SaaS architecture for R2Upload. Features a decoupled Next.js edge and Laravel 12 API core. Engineered for Zero-Egress cloud economics utilizing Cloudflare R2 Vaults and Supervisord-managed Redis workers. Orchestrated via Kamal 2 for >99.9% uptime.

This extension provides a rich authoring experience for Azure Device OS Configuration documents.

Cloudflare Worker CDN with hotlink protection for public buckets (B2/S3). Image optimization, bot blocking, custom errors, anti-click wrapper

A unified framework for strengthening CDN security and managing edge protection policies.

Scripts to sync local Crowdsec threat intelligence to Cloudflare firewall rules for edge protection

Authenticated Fibonacci-Based Encryption for Edge Workloads

FlareStack is an automated traffic abuse mitigation system built on Cloudflare Workers. It periodically analyzes Cloudflare Analytics data to detect high-frequency or abusive IPs and automatically blocks them using WAF custom lists, helping protect sites from scraping, bots, and request floods.

Board-ready Kinetic Gain surface for Cloudflare bot protection, WAF policy, and traffic-integrity posture.

Proxy-Wasm HMAC request signature verifier for Varnish and vmod-wasm

An inline network Intrusion Detection and Prevention System (IDS/IPS) deployed as a gateway on Raspberry Pi / Orange Pi single-board computer running a reduced instruction set computing (RISC) Debian-based distribution using Suricata in NFQueue mode.

Production Proxy-Wasm edge security filter for vmod-wasm

Engineering-to-Research Monograph Series (Zenodo community). Companion code (Python, C++, embedded C) MIT, github.com/AlanP13. Grounded in author coursework (IIT ECE 543/545, ECE 442); written from scratch for publication.

Production-ready Caddy WAF with Coraza + OWASP CRS, automatic TLS, and Docker-first hardening. No vendor lock-in.

HUMAN Security — independent third-party profile of a public API surface, by API Evangelist. HUMAN Security (formerly PerimeterX) is an application security company focused on stopping automated abuse: sophisticated bots, account takeover, fake account creation, scraping, ad fraud, client-side supply-chain attacks, and transaction fraud.

Access-log anomaly detection, source clustering, and traffic-forensics posture for growth and security teams.

DataDome — independent third-party profile of a public API surface, by API Evangelist. DataDome is a real-time bot and online fraud protection platform that inspects every web, mobile, and API request and decides — within milliseconds — whether it should be allowed, challenged, or blocked.